Office Word

CVEs (127)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-33822	Microsoft Office Word	Med	0.40	6.1	0.00	Apr 14, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83951	Microsoft Office Word	Med	0.36	5.5	0.00	Sep 8, 2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83949	Microsoft Office Word	Med	0.36	5.5	0.00	Sep 8, 2026	Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-78506	Microsoft Office Word	Med	0.36	5.5	0.01	Sep 8, 2026	Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-68843	Microsoft Office Word	Med	0.36	5.5	0.00	Sep 8, 2026	Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-70319	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70310	Microsoft Word	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66810	Microsoft Word	Med	0.36	5.5	0.00	Aug 11, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66806	Microsoft Word	Med	0.36	5.5	0.00	Aug 11, 2026	Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64917	Microsoft Word	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63531	Microsoft Word	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63530	Microsoft Word	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63528	Microsoft Word	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63521	Microsoft Word	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-35440	Microsoft Word	Med	0.36	5.5	0.00	May 12, 2026	Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2022-24511	Microsoft Word	Med	0.36	5.5	0.01	Mar 9, 2022	Microsoft Office Word Tampering Vulnerability
CVE-2026-72976	Microsoft Office Word	Med	0.33	5.0	0.00	Sep 8, 2026	Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-40421	Microsoft Word	Med	0.28	4.3	0.01	May 12, 2026	Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-45466	Microsoft Office Word	Low	0.21	3.3	0.00	Jun 9, 2026	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2009-0565	Microsoft Office		0.06	—	0.41	Jun 10, 2009	Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote…

CVE-2026-33822MedApr 14, 2026
Microsoft
Office Word
risk 0.40cvss 6.1epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83951MedSep 8, 2026
Microsoft
Office Word
risk 0.36cvss 5.5epss 0.00
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-83949MedSep 8, 2026
Microsoft
Office Word
risk 0.36cvss 5.5epss 0.00
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-78506MedSep 8, 2026
Microsoft
Office Word
risk 0.36cvss 5.5epss 0.01
Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-68843MedSep 8, 2026
Microsoft
Office Word
risk 0.36cvss 5.5epss 0.00
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-70319MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70310MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66810MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66806MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64917MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63531MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63530MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63528MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63521MedAug 11, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-35440MedMay 12, 2026
Microsoft
Word
risk 0.36cvss 5.5epss 0.00
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2022-24511MedMar 9, 2022
Microsoft
Word
risk 0.36cvss 5.5epss 0.01
Microsoft Office Word Tampering Vulnerability
CVE-2026-72976MedSep 8, 2026
Microsoft
Office Word
risk 0.33cvss 5.0epss 0.00
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-40421MedMay 12, 2026
Microsoft
Word
risk 0.28cvss 4.3epss 0.01
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-45466LowJun 9, 2026
Microsoft
Office Word
risk 0.21cvss 3.3epss 0.00
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2009-0565Jun 10, 2009
Microsoft
Office
risk 0.06cvss —epss 0.41
Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote…

Page 5 of 7