Microsoft Office vulnerabilities
1,025 published vulnerabilities in Microsoft Office, 34 of them exploited in the wild. The most were published in 2025 (138), and 47 so far in 2026.
Microsoft Office vulnerabilities by year
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Microsoft Office vulnerabilities
- CVE-2023-23397 Microsoft Office Outlook Privilege Escalation
- CVE-2019-1297 Microsoft Excel Remote Code Execution
- CVE-2019-0541 Microsoft MSHTML Remote Code Execution
- CVE-2018-0798 Microsoft Office Memory Corruption
- CVE-2015-2424 Microsoft PowerPoint Memory Corruption
- CVE-2015-1770 Microsoft Office Uninitialized Memory Use
- CVE-2012-1856 Microsoft Office MSCOMCTL.OCX Remote Code Execution
- CVE-2012-0158 Microsoft MSCOMCTL.OCX Remote Code Execution
- CVE-2009-0238 Microsoft Office Remote Code Execution
- CVE-2007-0671 Microsoft Office Excel Remote Code Execution
- CVE-2006-2492 Microsoft Word Malformed Object Pointer
- CVE-2026-21509 Microsoft Office Security Feature Bypass
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.