Microsoft Office LTSC 2021 vulnerabilities, page 5

781 vulnerabilities

Known vulnerabilities in Microsoft Office LTSC 2021, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8HighCVE-2026-96997microsoft · 365_apps +9 moreMicrosoft Office OneNote Elevation of Privilege VulnerabilityUse after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.EPSS0.30%7.8HighCVE-2026-96996microsoft · 365_apps +5 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.EPSS0.32%7.8HighCVE-2026-96995microsoft · 365_apps +9 moreMicrosoft Office Word Elevation of Privilege VulnerabilityStack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.EPSS0.30%6.5MediumCVE-2026-94506microsoft · 365_apps +5 moreMicrosoft Office Access Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.EPSS0.83%7.5HighCVE-2026-88207microsoft · 365_apps +9 moreMicrosoft Office PowerPoint Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.EPSS0.46%6.5MediumCVE-2026-88203microsoft · 365_apps +5 moreMicrosoft Office PowerPoint Information Disclosure VulnerabilityUntrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.EPSS0.83%8.8HighCVE-2026-88202microsoft · 365_apps +9 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.EPSS0.72%6.5MediumCVE-2026-88201microsoft · 365_apps +5 moreMicrosoft Office Excel Information Disclosure VulnerabilityBuffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.63%8.8HighCVE-2026-88197microsoft · 365_apps +9 moreMicrosoft Office Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.EPSS0.52%8.8HighCVE-2026-88196microsoft · 365_apps +9 moreMicrosoft Office Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.EPSS0.72%6.5MediumCVE-2026-88195microsoft · 365_apps +5 moreMicrosoft Office Excel Information Disclosure VulnerabilityBuffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.63%6.5MediumCVE-2026-88192microsoft · 365_apps +9 moreMicrosoft Office Excel Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.83%6.5MediumCVE-2026-88190microsoft · 365_apps +5 moreMicrosoft Office Excel Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.83%8.8HighCVE-2026-88186microsoft · 365_apps +9 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.EPSS0.72%8.1HighCVE-2026-88185microsoft · 365_apps +9 moreMicrosoft Office Word Remote Code Execution VulnerabilityHeap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.EPSS0.67%6.5MediumCVE-2026-88184microsoft · 365_apps +9 moreMicrosoft Office Excel Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.63%6.5MediumCVE-2026-88183microsoft · 365_apps +9 moreMicrosoft Office PowerPoint Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.EPSS0.83%9.8CriticalCVE-2026-88178microsoft · 365_apps +9 moreMicrosoft Office PowerPoint Remote Code Execution VulnerabilityUse after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.EPSS0.95%6.5MediumCVE-2026-88175microsoft · 365_apps +7 moreMicrosoft Office Excel Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.83%6.5MediumCVE-2026-88172microsoft · 365_apps +5 moreMicrosoft Office Excel Information Disclosure VulnerabilityOut-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.EPSS0.83%