Microsoft Office 2019 vulnerabilities, page 5
695 vulnerabilities
Known vulnerabilities in Microsoft Office 2019, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-54908microsoft · 365_apps +8 moreMicrosoft PowerPoint Remote Code Execution VulnerabilityUse after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.EPSS0.59%HighCVE-2025-54903microsoft · 365_apps +11 moreMicrosoft Excel Remote Code Execution VulnerabilityUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.57%HighCVE-2025-54902microsoft · 365_apps +11 moreMicrosoft Excel Remote Code Execution VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.57%HighCVE-2025-54898microsoft · 365_apps +11 moreMicrosoft Excel Remote Code Execution VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.57%MediumCVE-2025-54901microsoft · 365_apps +10 moreMicrosoft Excel Information Disclosure VulnerabilityBuffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.EPSS0.64%HighCVE-2025-54907microsoft · 365_apps +6 moreMicrosoft Office Visio Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally.EPSS0.51%HighCVE-2025-54899microsoft · 365_apps +10 moreMicrosoft Excel Remote Code Execution VulnerabilityFree of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.57%HighCVE-2025-54896microsoft · 365_apps +11 moreMicrosoft Excel Remote Code Execution VulnerabilityUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.57%HighCVE-2025-54910microsoft · 365_apps +9 moreMicrosoft Office Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.EPSS0.61%HighCVE-2025-59234microsoft · 365_apps +11 moreMicrosoft Office Remote Code Execution VulnerabilityUse after free in Microsoft Office allows an unauthorized attacker to execute code locally.EPSS0.60%HighCVE-2025-59238microsoft · 365_apps +8 moreMicrosoft PowerPoint Remote Code Execution VulnerabilityUse after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.EPSS0.38%HighCVE-2025-59233microsoft · 365_apps +11 moreMicrosoft Excel Remote Code Execution VulnerabilityAccess of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.53%HighCVE-2025-59227microsoft · 365_apps +11 moreMicrosoft Office Remote Code Execution VulnerabilityUse after free in Microsoft Office allows an unauthorized attacker to execute code locally.EPSS0.51%HighCVE-2025-59225microsoft · 365_apps +11 moreMicrosoft Excel Remote Code Execution VulnerabilityUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.38%HighCVE-2025-59235microsoft · 365_apps +17 moreMicrosoft Excel Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.EPSS0.65%HighCVE-2025-59231microsoft · 365_apps +11 moreMicrosoft Excel Remote Code Execution VulnerabilityAccess of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.53%HighCVE-2025-59232microsoft · 365_apps +17 moreMicrosoft Excel Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.EPSS0.48%HighCVE-2025-59221microsoft · 365_apps +13 moreMicrosoft Word Remote Code Execution VulnerabilityUse after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.EPSS0.39%HighCVE-2025-59236microsoft · 365_apps +9 moreMicrosoft Excel Remote Code Execution VulnerabilityUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.41%HighCVE-2025-59223microsoft · 365_apps +11 moreMicrosoft Excel Remote Code Execution VulnerabilityUse after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.EPSS0.38%