Microsoft Office For Android vulnerabilities
44 vulnerabilities
Known vulnerabilities in Microsoft Office For Android, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-85881microsoftmicrosoft office for android
EPSS score0.68%
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.CVE-2026-105731microsoftmicrosoft office for androidEPSS score0.38%
Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.CVE-2025-21338microsoftmicrosoft office for android+42EPSS score0.48%
GDI+ Remote Code Execution VulnerabilityCVE-2025-59234microsoft365_apps+11EPSS score0.60%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-59227microsoft365_apps+11EPSS score0.52%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-62554microsoft365_apps+11EPSS score0.43%
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-62557microsoft365_apps+11EPSS score0.43%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-62199microsoft365_apps+10EPSS score0.81%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-26687microsoft365_copilot+38EPSS score1.14%
Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.CVE-2025-47162microsoft365_apps+11EPSS score0.76%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-47164microsoft365_apps+11EPSS score0.65%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-47167microsoft365_apps+11EPSS score0.67%
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-47953microsoft365_apps+11EPSS score0.54%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-53766microsoft365_copilot+38EPSS score8.19%
Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.CVE-2025-53799microsoft365_copilot+36EPSS score0.78%
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.CVE-2025-53732microsoft365_copilot+3EPSS score0.48%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-49695microsoft365_apps+11EPSS score0.69%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-49697microsoft365_apps+12EPSS score0.53%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-49696microsoft365_apps+11EPSS score0.64%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-49702microsoft365_apps+11EPSS score0.66%
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.