Office
Microsoft- Software type
- —
- Catalog vulnerabilities
- 1,030
Severity across 27 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 27 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, within CyStack's analyzed data, Office has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Office and determine which vulnerabilities affect that version.
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-70105Microsoft Word Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/20/2026 | SeverityMedium |
CVE-2026-55054Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityMedium |
CVE-2026-47293Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/09/2026 | SeverityHigh |
CVE-2026-42832Microsoft Office Spoofing Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40420Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-35436Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40418Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40367Microsoft Word Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40362Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40361Microsoft Outlook and Word Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40359Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40358Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-42831Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40421Microsoft Word Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityMedium |
CVE-2026-40419Microsoft Office Click-To-Run Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40366Microsoft Word Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40364Microsoft Word Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40363Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-40360Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityHigh |
CVE-2026-35440Microsoft Word Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published05/12/2026 | SeverityMedium |
CVE-2026-32200Microsoft PowerPoint Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityHigh |
CVE-2026-32199Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityHigh |
CVE-2026-32198Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityHigh |
CVE-2026-32197Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityHigh |
CVE-2026-32190Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityHigh |
CVE-2026-32189Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityHigh |
CVE-2026-32188Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published04/14/2026 | SeverityHigh |
CVE-2026-26110Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-26109Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-26108Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-26107Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-26134Microsoft Office Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-26113Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-26112Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-25180Windows Graphics Component Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityMedium |
CVE-2026-24285Win32k Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published03/10/2026 | SeverityHigh |
CVE-2026-21261Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/10/2026 | SeverityMedium |
CVE-2026-21511Microsoft Outlook Spoofing Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/10/2026 | SeverityHigh |
CVE-2026-21260Microsoft Outlook Spoofing Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/10/2026 | SeverityHigh |
CVE-2026-21258Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/10/2026 | SeverityMedium |
CVE-2026-21259Microsoft Excel Elevation of Privilege Vulnerability | Exploitation statusNot known exploited | FixYes | Published02/10/2026 | SeverityHigh |
CVE-2026-21509Microsoft Office Security Feature Bypass Vulnerability | Exploitation statusKEV | FixYes | Published01/26/2026 | SeverityHigh |
CVE-2026-20957Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/13/2026 | SeverityHigh |
CVE-2026-20952Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/13/2026 | SeverityHigh |
CVE-2026-20950Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/13/2026 | SeverityHigh |
CVE-2026-20948Microsoft Word Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/13/2026 | SeverityHigh |
CVE-2026-20955Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/13/2026 | SeverityHigh |
CVE-2026-20953Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/13/2026 | SeverityHigh |
CVE-2026-20946Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/13/2026 | SeverityHigh |
CVE-2026-20943Microsoft Office Click-To-Run Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published01/13/2026 | SeverityHigh |
CVE-2025-62560Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62559Microsoft Word Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62558Microsoft Word Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62557Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62556Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62555Microsoft Word Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62554Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62553Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62552Microsoft Access Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62564Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62563Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62562Microsoft Outlook Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62561Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published12/09/2025 | SeverityHigh |
CVE-2025-62203Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityHigh |
CVE-2025-62202Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityHigh |
CVE-2025-62201Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityHigh |
CVE-2025-62200Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityHigh |
CVE-2025-60724GDI+ Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityCritical |
CVE-2025-59240Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityMedium |
CVE-2025-62199Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityHigh |
CVE-2025-60727Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityHigh |
CVE-2025-60726Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published11/11/2025 | SeverityHigh |
CVE-2025-59238Microsoft PowerPoint Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59232Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59227Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59225Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59224Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59223Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59222Microsoft Word Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59221Microsoft Word Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59236Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59235Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59234Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59233Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-59231Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published10/14/2025 | SeverityHigh |
CVE-2025-54910Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-54901Microsoft Excel Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityMedium |
CVE-2025-54900Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-53799Windows Imaging Component Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityMedium |
CVE-2025-54908Microsoft PowerPoint Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-54907Microsoft Office Visio Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-54906Microsoft Office Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-54905Microsoft Word Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-54904Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-54903Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-54902Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-54899Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-54898Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-54896Microsoft Excel Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published09/09/2025 | SeverityHigh |
CVE-2025-53766GDI+ Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityCritical |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan