Office 2019 (Microsoft) - vulnerabilities (CVEs)

527 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-09-08. Vendor: Microsoft.

CVEs of Office 2019

• CVE-2026-62804 - CVSS 7.8 (high), 2026-09-08: External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2026-85875 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-83949 - CVSS 5.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-83951 - CVSS 5.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-81948 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81950 - CVSS 7.8 (high), 2026-09-08: Double free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81953 - CVSS 7.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81949 - CVSS 7.8 (high), 2026-09-08: Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81959 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81952 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-81955 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
• CVE-2026-81951 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81388 - CVSS 7.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81957 - CVSS 7.8 (high), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81395 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81960 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81394 - CVSS 5.5 (medium), 2026-09-08: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information…
• CVE-2026-81389 - CVSS 7 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81400 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81956 - CVSS 7.8 (high), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81393 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81397 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81392 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81396 - CVSS 7.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81401 - CVSS 5.5 (medium), 2026-09-08: Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81958 - CVSS 5.5 (medium), 2026-09-08: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81399 - CVSS 5.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81391 - CVSS 5.5 (medium), 2026-09-08: Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81390 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
• CVE-2026-81954 - CVSS 7.8 (high), 2026-09-08: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81387 - CVSS 5.5 (medium), 2026-09-08: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information…
• CVE-2026-81947 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81386 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81398 - CVSS 7.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
• CVE-2026-81385 - CVSS 8.8 (high), 2026-09-08: Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
• CVE-2026-80082 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80090 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80089 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80088 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80091 - CVSS 6.5 (medium), 2026-09-08: Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80085 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-80087 - CVSS 6.5 (medium), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80086 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80080 - CVSS 8.8 (high), 2026-09-08: Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78525 - CVSS 8.8 (high), 2026-09-08: Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-80084 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78526 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-80078 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80076 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78520 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-78524 - CVSS 8.8 (high), 2026-09-08: Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-78522 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-80073 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78521 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-80079 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78519 - CVSS 8.8 (high), 2026-09-08: Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-78503 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78514 - CVSS 8.8 (high), 2026-09-08: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78512 - CVSS 8.8 (high), 2026-09-08: Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78507 - CVSS 8.8 (high), 2026-09-08: Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78506 - CVSS 5.5 (medium), 2026-09-08: Improper null termination in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2026-77911 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-77901 - CVSS 8.8 (high), 2026-09-08: Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-72976 - CVSS 5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
• CVE-2026-72975 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-72974 - CVSS 6.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-72977 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-72938 - CVSS 6.5 (medium), 2026-09-08: Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a…
• CVE-2026-72973 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-72972 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-72956 - CVSS 6.5 (medium), 2026-09-08: Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69632 - CVSS 8.8 (high), 2026-09-08: Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-69626 - CVSS 6.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69477 - CVSS 7.3 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
• CVE-2026-69629 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-69614 - CVSS 8.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
• CVE-2026-69442 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-64918 - CVSS 6.5 (medium), 2026-09-08: Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
• CVE-2026-78518 - CVSS 8.8 (high), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
• CVE-2026-78517 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78509 - CVSS 9.8 (critical), 2026-09-08: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-78504 - CVSS 8.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-78513 - CVSS 5.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
• CVE-2026-78510 - CVSS 8.4 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• CVE-2026-78505 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-78502 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78515 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-78511 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-77898 - CVSS 7.5 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-69285 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
• CVE-2026-69797 - CVSS 8.8 (high), 2026-09-08: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-69767 - CVSS 8.8 (high), 2026-09-08: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-69778 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
• CVE-2026-69764 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-69759 - CVSS 8.8 (high), 2026-09-08: Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
• CVE-2026-69529 - CVSS 8.8 (high), 2026-09-08: Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
• CVE-2026-69739 - CVSS 7.5 (high), 2026-09-08: Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69719 - CVSS 6.5 (medium), 2026-09-08: Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69742 - CVSS 8.8 (high), 2026-09-08: Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
• CVE-2026-69734 - CVSS 6.5 (medium), 2026-09-08: Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.