Microsoft
Microsoft Word: vulnerabilidades y CVE
Microsoft Word tiene 319 vulnerabilidades publicadas, 84 de ellas en los últimos 12 meses. 4 son críticas y 10 figuran en el catálogo de explotación activa de CISA.
CVE319
Últimos 12 meses84
Críticas4
Explotadas activamente10
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2007-0671 | Alta (8.8) | 43% | ⚠ Explotación activa | 3 feb 2007 | Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as… |
| CVE-2023-36761 | Media (6.5) | 20% | ⚠ Explotación activa | 12 sept 2023 | Microsoft Word Information Disclosure Vulnerability |
| CVE-2012-2539 | Alta (7.8) | 53% | ⚠ Explotación activa | 12 dic 2012 | Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service… |
| CVE-2015-2424 | Alta (8.8) | 40% | ⚠ Explotación activa | 14 jul 2015 | Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of… |
| CVE-2016-7193 | Alta (7.8) | 58% | ⚠ Explotación activa | 14 oct 2016 | Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010… |
| CVE-2017-11826 | Alta (7.8) | 81% | ⚠ Explotación activa | 13 oct 2017 | Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office… |
| CVE-2014-1761 | Alta (7.8) | 77% | ⚠ Explotación activa | 25 mar 2014 | Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office… |
| CVE-2018-0802 | Alta (7.8) | 93% | ⚠ Explotación activa | 10 ene 2018 | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft… |
| CVE-2018-0798 | Alta (8.8) | 95% | ⚠ Explotación activa | 10 ene 2018 | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft… |
| CVE-2015-1641 | Alta (7.8) | 97% | ⚠ Explotación activa | 14 abr 2015 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-83951 | Media (5.5) | 0.54% | — | 8 sept 2026 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-83949 | Media (5.5) | 0.54% | — | 8 sept 2026 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-80090 | Media (6.5) | 0.92% | — | 8 sept 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80085 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80080 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80079 | Media (6.5) | 0.92% | — | 8 sept 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78525 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78522 | Media (6.5) | 0.92% | — | 8 sept 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78521 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78520 | Media (6.5) | 0.92% | — | 8 sept 2026 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78517 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78514 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78512 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78511 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78509 | Crítica (9.8) | 0.97% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78506 | Media (5.5) | 0.54% | — | 8 sept 2026 | Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-78504 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78503 | Media (6.5) | 0.92% | — | 8 sept 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78502 | Media (6.5) | 0.92% | — | 8 sept 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-77911 | Media (6.5) | 0.92% | — | 8 sept 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-77901 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72976 | Media (5) | 0.51% | — | 8 sept 2026 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally. |
| CVE-2026-72973 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72972 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69764 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69759 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69734 | Media (6.5) | 0.92% | — | 8 sept 2026 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69722 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69719 | Media (6.5) | 0.92% | — | 8 sept 2026 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69686 | Alta (8.8) | 0.82% | — | 8 sept 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |