Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Office
Total 889 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-0031 1 Microsoft 1 Office 2025-04-03 5.1 MEDIUM N/A
Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption.
CVE-2002-0617 1 Microsoft 2 Excel, Office 2025-04-03 5.1 MEDIUM N/A
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."
CVE-2018-0798 1 Microsoft 3 Office, Office Compatibility Pack, Word 2025-03-26 9.3 HIGH 8.8 HIGH
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".
CVE-2018-0802 1 Microsoft 3 Office, Office Compatibility Pack, Word 2025-03-26 9.3 HIGH 7.8 HIGH
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.
CVE-2023-23397 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-03-13 N/A 9.8 CRITICAL
Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2021-42292 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2025-03-07 6.8 MEDIUM 7.8 HIGH
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2021-38646 1 Microsoft 2 365 Apps, Office 2025-03-07 6.8 MEDIUM 7.8 HIGH
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVE-2021-27059 1 Microsoft 1 Office 2025-03-07 8.5 HIGH 7.6 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-36765 1 Microsoft 1 Office 2025-02-28 N/A 7.8 HIGH
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-36569 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-02-28 N/A 8.4 HIGH
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-33150 1 Microsoft 3 365 Apps, Office, Word 2025-02-28 N/A 9.6 CRITICAL
Microsoft Office Security Feature Bypass Vulnerability
CVE-2023-33148 1 Microsoft 2 365 Apps, Office 2025-02-28 N/A 7.8 HIGH
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-33131 1 Microsoft 4 Office, Office Long Term Servicing Channel, Outlook and 1 more 2025-02-28 N/A 8.8 HIGH
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-23398 1 Microsoft 3 365 Apps, Excel, Office 2025-02-28 N/A 7.1 HIGH
Microsoft Excel Spoofing Vulnerability
CVE-2022-41061 1 Microsoft 7 365 Apps, Office, Office Online Server and 4 more 2025-02-28 N/A 7.8 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-40485 1 Microsoft 6 365 Apps, Excel, Office and 3 more 2025-02-28 6.8 MEDIUM 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-31949 1 Microsoft 3 365 Apps, Office, Outlook 2025-02-28 6.8 MEDIUM 7.3 HIGH
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-29333 1 Microsoft 2 365 Apps, Office 2025-02-28 N/A 3.3 LOW
Microsoft Access Denial of Service Vulnerability
CVE-2025-21392 1 Microsoft 2 365 Apps, Office 2025-02-26 N/A 7.8 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-35311 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-02-24 N/A 8.8 HIGH
Microsoft Outlook Security Feature Bypass Vulnerability