Microsoft Office LTSC 2021 vulnerabilities
783 vulnerabilities
Known vulnerabilities in Microsoft Office LTSC 2021, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-108455microsoftmicrosoft 365 apps for enterprise+5
EPSS score0.51%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2026-108454microsoftmicrosoft 365 apps for enterprise+5EPSS score0.51%
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2026-108453microsoftmicrosoft 365 apps for enterprise+5EPSS score0.53%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2026-108451microsoftmicrosoft 365 apps for enterprise+2EPSS score0.44%
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108450microsoftmicrosoft 365 apps for enterprise+2EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108449microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108448microsoftmicrosoft 365 apps for enterprise+5EPSS score0.35%
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.CVE-2026-108447microsoftmicrosoft 365 apps for enterprise+2EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108446microsoftmicrosoft 365 apps for enterprise+6EPSS score0.44%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-108445microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108444microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.CVE-2026-108443microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108442microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108441microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108440microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108439microsoftmicrosoft 365 apps for enterprise+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108437microsoftmicrosoft 365 apps for enterprise+2EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108436microsoftmicrosoft 365 apps for enterprise+5EPSS score0.51%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108435microsoftmicrosoft 365 apps for enterprise+5EPSS score0.51%
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-108434microsoftmicrosoft 365 apps for enterprise+5EPSS score0.51%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.