Microsoft Office known exploited vulnerabilities
We track 29 CVEs in Microsoft Office. All of them are on CISA's Known Exploited Vulnerabilities catalog, meaning CISA has evidence of exploitation in the wild (listed 2021–2026). CISA flags 3 of them as used in ransomware campaigns. The most recent is CVE-2009-0238, added to KEV on .
- CVEs tracked
- 29
- On CISA KEV
- 29
- Ransomware use
- 3
- Rated critical
- 1
Every Microsoft Office CVE we track
| CVE / Vulnerability | Severity | CVSS | EPSS | Added to KEV | Patch by |
|---|---|---|---|---|---|
| CVE-2009-0238 Microsoft Office Remote Code Execution | [ HIGH ] | 8.8 | 42.9% | ||
| CVE-2026-21514 Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability | [ HIGH ] | 7.8 | 1.6% | ||
| CVE-2026-21509 Microsoft Office Security Feature Bypass Vulnerability | [ HIGH ] | 7.8 | 70.8% | ||
| CVE-2009-0556 Microsoft Office PowerPoint Code Injection Vulnerability | [ HIGH ] | 8.8 | 67.3% | ||
| CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 43.2% | ||
| CVE-2023-23397 Microsoft Office Outlook Privilege Escalation Vulnerability | [ CRITICAL ] | 9.8 | 97.2% | ||
| CVE-2023-21715 Microsoft Office Publisher Security Feature Bypass Vulnerability | [ HIGH ] | 7.3 | 12.0% | ||
| CVE-2013-1331 Microsoft Office Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 79.8% | ||
| CVE-2009-0563 Microsoft Office Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 62.8% | ||
| CVE-2009-0557 Microsoft Office Object Record Corruption Vulnerability | [ HIGH ] | 7.8 | 53.0% | ||
| CVE-2021-38646 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerabilityransomware use | [ HIGH ] | 7.8 | 8.0% | ||
| CVE-2015-1770 Microsoft Office Uninitialized Memory Use Vulnerability | [ HIGH ] | 8.8 | 35.0% | ||
| CVE-2017-11826 Microsoft Office Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 81.3% | ||
| CVE-2017-0261 Microsoft Office Use-After-Free Vulnerability | [ HIGH ] | 7.8 | 78.1% | ||
| CVE-2016-7193 Microsoft Office Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 57.6% | ||
| CVE-2015-2545 Microsoft Office Malformed EPS File Vulnerability | [ HIGH ] | 7.8 | 85.9% | ||
| CVE-2015-1642 Microsoft Office Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 53.1% | ||
| CVE-2012-1856 Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | [ HIGH ] | 8.8 | 72.0% | ||
| CVE-2010-3333 Microsoft Office Stack-based Buffer Overflow Vulnerability | [ HIGH ] | 7.8 | 89.4% | ||
| CVE-2017-8570 Microsoft Office Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 89.9% | ||
| CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability | [ HIGH ] | 7.8 | 81.0% | ||
| CVE-2021-42292 Microsoft Excel Security Feature Bypass | [ HIGH ] | 7.8 | 43.0% | ||
| CVE-2021-27059 Microsoft Office Remote Code Execution Vulnerability | [ HIGH ] | 7.6 | 6.1% | ||
| CVE-2018-0802 Microsoft Office Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 7.8 | 93.3% | ||
| CVE-2018-0798 Microsoft Office Memory Corruption Vulnerability | [ HIGH ] | 8.8 | 95.1% | ||
| CVE-2017-11882 Microsoft Office Memory Corruption Vulnerabilityransomware use | [ HIGH ] | 7.8 | 99.9% | ||
| CVE-2017-11774 Microsoft Office Outlook Security Feature Bypass Vulnerability | [ HIGH ] | 7.8 | 59.6% | ||
| CVE-2016-3235 Microsoft Office OLE DLL Side Loading Vulnerability | [ HIGH ] | 7.8 | 43.3% | ||
| CVE-2015-1641 Microsoft Office Memory Corruption Vulnerability | [ HIGH ] | 7.8 | 97.2% |
Sorted by date added to KEV. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org. "Patch by" is CISA's BOD 22-01 deadline for US federal agencies, a useful priority signal for everyone else. Machine-readable: /api/v1/vendors/microsoft.json.
Other Microsoft products
Every row links to its CVE record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker or compare KEV catalogs.