Microsoft Office For Android vulnerabilities, page 2
44 vulnerabilities
Known vulnerabilities in Microsoft Office For Android, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-30386microsoft365_apps+11
EPSS score0.68%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-30388microsoft365_copilot+41EPSS score4.38%
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.CVE-2025-30377microsoft365_apps+12EPSS score0.68%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-60724microsoft365_copilot+37EPSS score6.29%
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.CVE-2024-38250microsoft365_copilot+39EPSS score0.69%
Windows Graphics Component Elevation of Privilege VulnerabilityCVE-2026-40363microsoft365_apps+11EPSS score0.36%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-26110microsoft365_apps+11EPSS score0.35%
Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-26134microsoft365_copilot+1EPSS score0.35%
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally.CVE-2026-42831microsoft365_copilot+5EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-20846microsoftmicrosoft office for android+28EPSS score1.43%
Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.CVE-2026-25180microsoft365_copilot+31EPSS score0.68%
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.CVE-2026-56176microsoftmicrosoft office 365 for mac+28EPSS score0.33%
Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.CVE-2026-24285microsoft365_copilot+29EPSS score0.47%
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.CVE-2026-45474microsoft365_apps+14EPSS score0.36%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-45463microsoft365_apps+14EPSS score0.36%
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-45460microsoft365_apps+13EPSS score0.42%
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-45472microsoft365_apps+14EPSS score0.36%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-45461microsoft365_apps+14EPSS score0.36%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-78439microsoftmicrosoft office 365 for mac+3EPSS score0.84%
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.CVE-2026-50387microsoftmicrosoft_365+31EPSS score0.33%
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.