# Microsoft Office Long Term Servicing Channel


- [CVE-2024-21413](https://insights.sbomify.com/CVE-2024-21413/): Microsoft Outlook Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2023-23397](https://insights.sbomify.com/CVE-2023-23397/): Microsoft Office Outlook Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2024-38189](https://insights.sbomify.com/CVE-2024-38189/): Microsoft Project Remote Code Execution Vulnerability (high 8.8, exploited in the wild)
- [CVE-2026-21514](https://insights.sbomify.com/CVE-2026-21514/): Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision (high 7.8, exploited in the wild)
- [CVE-2026-21509](https://insights.sbomify.com/CVE-2026-21509/): Microsoft Office Security Feature Bypass (high 7.8, exploited in the wild)
- [CVE-2024-38226](https://insights.sbomify.com/CVE-2024-38226/): Microsoft Publisher Protection Mechanism Failure (high 7.3, exploited in the wild)
- [CVE-2023-36761](https://insights.sbomify.com/CVE-2023-36761/): Microsoft Word Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2025-60724](https://insights.sbomify.com/CVE-2025-60724/): GDI+ Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-21716](https://insights.sbomify.com/CVE-2023-21716/): Microsoft Word Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-33150](https://insights.sbomify.com/CVE-2023-33150/): Microsoft Office Security Feature Bypass Vulnerability (critical 9.6)
- [CVE-2026-35436](https://insights.sbomify.com/CVE-2026-35436/): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-40420](https://insights.sbomify.com/CVE-2026-40420/): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/office-long-term-servicing-channel/