Microsoft Office 2019 vulnerabilities, page 4
695 vulnerabilities
Known vulnerabilities in Microsoft Office 2019, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-21357microsoft365_apps+8
EPSS score0.59%
Microsoft Outlook Remote Code Execution VulnerabilityCVE-2025-21354microsoft365_apps+9EPSS score0.95%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2025-21346microsoft365_apps+7EPSS score0.70%
Microsoft Office Security Feature Bypass VulnerabilityCVE-2025-21356microsoft365_apps+6EPSS score0.75%
Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2025-21386microsoft365_apps+11EPSS score0.84%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2025-21395microsoft365_apps+9EPSS score1.06%
Microsoft Access Remote Code Execution VulnerabilityCVE-2025-21392microsoft365_apps+9EPSS score0.84%
Microsoft Office Remote Code Execution VulnerabilityCVE-2025-21383microsoft365_apps+10EPSS score1.01%
Microsoft Excel Information Disclosure VulnerabilityCVE-2025-21366microsoft365_apps+9EPSS score1.15%
Microsoft Access Remote Code Execution VulnerabilityCVE-2025-21390microsoft365_apps+11EPSS score0.84%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2025-21387microsoft365_apps+11EPSS score0.93%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2025-21381microsoft365_apps+11EPSS score1.14%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2025-21186microsoft365_apps+9EPSS score1.19%
Microsoft Access Remote Code Execution VulnerabilityCVE-2025-21394microsoft365_apps+11EPSS score0.84%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2025-21345microsoft365_apps+6EPSS score0.61%
Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2025-21362microsoft365_apps+11EPSS score0.94%
Microsoft Excel Remote Code Execution VulnerabilityCVE-2025-54900microsoft365_apps+11EPSS score0.57%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-54905microsoft365_apps+14EPSS score0.62%
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2025-54904microsoft365_apps+11EPSS score0.57%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-54906microsoft365_apps+12EPSS score0.76%
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.