Microsoft Office Word vulnerabilities

128 known CVE vulnerabilities in Microsoft Office Word, translated and rated.

CVE-2026-81952High
Heap-based buffer overflow in Microsoft Office Word. Allows an unauthorized attacker to execute code over a network.
CVE-2026-80090Medium
Out-of-bounds read in Microsoft Office Word. An unauthorized attacker can disclose information over a network.
CVE-2026-80088Medium
Out-of-bounds read in Microsoft Office Word. An unauthorized attacker can disclose information over a network.
CVE-2026-80085High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80080High
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-80079Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78526High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78522Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78521High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78517High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78514High
Use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78512High
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78511High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78507High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78506Medium
An improper null termination vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-78504High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-78503Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-78502Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-77911Medium
Out-of-bounds read in Microsoft Office Word allows an unauthenticated attacker to disclose information over a network.
CVE-2026-77901High
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-77504High
A double free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code remotely over the network.
CVE-2026-72976Medium
An out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-72973High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-72972High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69764High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69759High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69734Medium
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69722High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69719Medium
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69686High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69671High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69556High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-69360High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-68843Medium
A vulnerability in Microsoft Office Word involves a use-after-free condition. An authorized attacker could exploit this to disclose information locally.
CVE-2026-62804High
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70105Medium
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-70319Medium
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70311High
A use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-70310Medium
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66810Medium
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66806Medium
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64917Medium
An out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64915High
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64907High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64905High
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63531Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63530Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63528Medium
An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63527High
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63525High
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS