Microsoft Word vulnerabilities

319 CVEs affecting Microsoft Word, 10 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-83951, published 2026-09-08.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-1641: Microsoft Office Memory Corruption Vulnerability, published 2015-04-14. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 97.2% chance of exploitation in the next 30 days. Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and…
• CVE-2018-0798: Microsoft Office Memory Corruption Vulnerability, published 2018-01-10. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 95.1% chance of exploitation in the next 30 days. Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in…
• CVE-2018-0802: Microsoft Office Memory Corruption Vulnerability, published 2018-01-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 93.3% chance of exploitation in the next 30 days. Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in…
• CVE-2017-11826: Microsoft Office Remote Code Execution Vulnerability, published 2017-10-13. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 81.3% chance of exploitation in the next 30 days. Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation…
• CVE-2014-1761: Microsoft Word Memory Corruption Vulnerability, published 2014-03-25. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-02-15. EPSS: 77.7% chance of exploitation in the next 30 days. Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2…
• CVE-2016-7193: Microsoft Office Memory Corruption Vulnerability, published 2016-10-14. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 57.6% chance of exploitation in the next 30 days. Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on…
• CVE-2012-2539: Microsoft Word Remote Code Execution Vulnerability, published 2012-12-12. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-03-28. EPSS: 53% chance of exploitation in the next 30 days. Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a…
• CVE-2007-0671: Microsoft Office Excel Remote Code Execution Vulnerability, published 2007-02-03. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-08-12. EPSS: 43.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack…
• CVE-2015-2424: Microsoft PowerPoint Memory Corruption Vulnerability, published 2015-07-14. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 40.4% chance of exploitation in the next 30 days. Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or…
• CVE-2023-36761: Microsoft Word Information Disclosure Vulnerability, published 2023-09-12. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2023-09-12. EPSS: 19.6% chance of exploitation in the next 30 days. Microsoft Word Information Disclosure Vulnerability

Latest

• CVE-2026-83951, published 2026-09-08. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-83949, published 2026-09-08. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-80090, published 2026-09-08. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80085, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-80080, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-80079, published 2026-09-08. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78525, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-78522, published 2026-09-08. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78521, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78520, published 2026-09-08. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.