Microsoft
Microsoft Word: vulnerabilities and CVEs
Microsoft Word has 319 published vulnerabilities, 84 of them in the last 12 months. 4 are rated critical and 10 are listed by CISA as actively exploited.
CVEs319
Last 12 months84
Critical4
Actively exploited10
All vulnerabilities in the catalogue →⭐ Follow this technology
🔴 Actively exploited (CISA KEV)
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-0671 | High (8.8) | 43% | ⚠ Active exploitation | Feb 3, 2007 | Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as… |
| CVE-2023-36761 | Medium (6.5) | 20% | ⚠ Active exploitation | Sep 12, 2023 | Microsoft Word Information Disclosure Vulnerability |
| CVE-2012-2539 | High (7.8) | 53% | ⚠ Active exploitation | Dec 12, 2012 | Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service… |
| CVE-2015-2424 | High (8.8) | 40% | ⚠ Active exploitation | Jul 14, 2015 | Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of… |
| CVE-2016-7193 | High (7.8) | 58% | ⚠ Active exploitation | Oct 14, 2016 | Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010… |
| CVE-2017-11826 | High (7.8) | 81% | ⚠ Active exploitation | Oct 13, 2017 | Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office… |
| CVE-2014-1761 | High (7.8) | 77% | ⚠ Active exploitation | Mar 25, 2014 | Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office… |
| CVE-2018-0802 | High (7.8) | 93% | ⚠ Active exploitation | Jan 10, 2018 | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft… |
| CVE-2018-0798 | High (8.8) | 95% | ⚠ Active exploitation | Jan 10, 2018 | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft… |
| CVE-2015-1641 | High (7.8) | 97% | ⚠ Active exploitation | Apr 14, 2015 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office… |
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-83951 | Medium (5.5) | 0.54% | — | Sep 8, 2026 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-83949 | Medium (5.5) | 0.54% | — | Sep 8, 2026 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-80090 | Medium (6.5) | 0.92% | — | Sep 8, 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-80085 | High (8.8) | 0.82% | — | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80080 | High (8.8) | 0.82% | — | Sep 8, 2026 | Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80079 | Medium (6.5) | 0.92% | — | Sep 8, 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78525 | High (8.8) | 0.82% | — | Sep 8, 2026 | Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78522 | Medium (6.5) | 0.92% | — | Sep 8, 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78521 | High (8.8) | 0.82% | — | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78520 | Medium (6.5) | 0.92% | — | Sep 8, 2026 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78517 | High (8.8) | 0.82% | — | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78514 | High (8.8) | 0.82% | — | Sep 8, 2026 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78512 | High (8.8) | 0.82% | — | Sep 8, 2026 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78511 | High (8.8) | 0.82% | — | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78509 | Critical (9.8) | 0.97% | — | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78506 | Medium (5.5) | 0.54% | — | Sep 8, 2026 | Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
| CVE-2026-78504 | High (8.8) | 0.82% | — | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-78503 | Medium (6.5) | 0.92% | — | Sep 8, 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-78502 | Medium (6.5) | 0.92% | — | Sep 8, 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-77911 | Medium (6.5) | 0.92% | — | Sep 8, 2026 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-77901 | High (8.8) | 0.82% | — | Sep 8, 2026 | Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72976 | Medium (5) | 0.51% | — | Sep 8, 2026 | Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally. |
| CVE-2026-72973 | High (8.8) | 0.82% | — | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-72972 | High (8.8) | 0.82% | — | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69764 | High (8.8) | 0.82% | — | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69759 | High (8.8) | 0.82% | — | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69734 | Medium (6.5) | 0.92% | — | Sep 8, 2026 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69722 | High (8.8) | 0.82% | — | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69719 | Medium (6.5) | 0.92% | — | Sep 8, 2026 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69686 | High (8.8) | 0.82% | — | Sep 8, 2026 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
🎯 How it gets exploited (ATT&CK techniques)
Number of CVEs of this technology mapped to each exploitation or primary-impact technique.