Microsoft Office Word vulnerabilities

128 known CVE vulnerabilities in Microsoft Office Word, translated and rated.

CVE-2026-20948High
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-20944High
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70300Critical
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-40364High
In Microsoft Office Word, a vulnerability related to access of resource using incompatible type ('type confusion') allows an unauthorized attacker to execute code locally.
CVE-2026-108451High
A numeric truncation error in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The flaw stems from improper handling of numeric values.
CVE-2026-108450High
A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.
CVE-2026-108449High
A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.
CVE-2026-108447High
A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.
CVE-2026-108445High
A stack-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.
CVE-2026-108443High
An off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw stems from an incorrect buffer size calculation by one byte.
CVE-2026-108442High
A use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw involves accessing memory after it has been freed.
CVE-2026-108441High
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.
CVE-2026-108440High
A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated stack memory region.
CVE-2026-108439High
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.
CVE-2026-108438Medium
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108437High
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.
CVE-2026-108436Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108435Medium
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108434Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-108433High
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. The flaw involves making security decisions based on data that cannot be trusted.
CVE-2026-108432High
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.
CVE-2026-108431High
A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated stack memory region.
CVE-2026-108430High
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw results from writing data beyond the allocated heap memory region.
CVE-2026-108429High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108428High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108427High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-108426High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-97001High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96996High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-96995High
Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.
CVE-2026-88210High
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-88202High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The issue stems from improper memory handling during document processing.
CVE-2026-88186High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88185High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-88169Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88167Medium
A buffer over-read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-88150High
A use of uninitialized resource vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-83891High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70302High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70301High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70287High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70269High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70268High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70263Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70220High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70206Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-105715High
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-102867Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. An attacker could leverage this vulnerability to leak data.
CVE-2026-83951Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83949Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS