Microsoft Word

323 CVEs affecting Microsoft Word. Latest disclosed: 2026-09-08. Critical: 3, High: 160.

Top CVEs affecting Microsoft Word
CVESeverityScorePublishedSummary
CVE-2026-78509Critical9.82026-09-08Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2023-21716Critical9.82023-02-14Microsoft Word Remote Code Execution Vulnerability
CVE-2023-33150Critical9.62023-07-11Microsoft Office Security Feature Bypass Vulnerability
CVE-2026-80085High8.82026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80080High8.82026-09-08Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78525High8.82026-09-08Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-78521High8.82026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78517High8.82026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78514High8.82026-09-08Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78512High8.82026-09-08Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78511High8.82026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78504High8.82026-09-08Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77901High8.82026-09-08Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72973High8.82026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72972High8.82026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69764High8.82026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69759High8.82026-09-08Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69722High8.82026-09-08Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69686High8.82026-09-08Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69671High8.82026-09-08Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.