Microsoft Office 2019 vulnerabilities

293 vulnerabilities

Known vulnerabilities in Microsoft Office 2019, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-42292microsoft365_apps+14KEV
EPSS score
43.00%
Microsoft Excel Security Feature Bypass Vulnerability
7.8CVE-2021-38646microsoft365_apps+7KEVRansomware
EPSS score
7.99%
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
9.8CVE-2024-21413microsoft365_apps+7KEV
EPSS score
94.66%
Microsoft Outlook Remote Code Execution Vulnerability
7.3CVE-2024-38226microsoftmicrosoft office 2019+5KEV
EPSS score
2.67%
Microsoft Publisher Security Feature Bypass Vulnerability
8.8CVE-2024-38189microsoft365_apps+7KEV
EPSS score
8.19%
Microsoft Project Remote Code Execution Vulnerability
7.8CVE-2026-63513microsoft365_apps+13
EPSS score
0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
5.5CVE-2026-63530microsoft365_apps+13
EPSS score
0.54%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
7.8CVE-2026-63518microsoft365_apps+13
EPSS score
0.47%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
7.8CVE-2026-63526microsoft365_apps+13
EPSS score
0.47%
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
5.5CVE-2026-63521microsoft365_apps+9
EPSS score
0.43%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
7.8CVE-2026-63533microsoft365_apps+13
EPSS score
0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
7.8CVE-2026-63515microsoft365_apps+13
EPSS score
0.47%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
7.8CVE-2026-63525microsoft365_apps+9
EPSS score
0.47%
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
7.8CVE-2026-63527microsoft365_apps+13
EPSS score
0.47%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
5.5CVE-2026-63531microsoft365_apps+13
EPSS score
0.54%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
5.5CVE-2026-63528microsoft365_apps+13
EPSS score
0.54%
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
7.8CVE-2026-63532microsoft365_apps+13
EPSS score
0.47%
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
5.5CVE-2026-63529microsoft365_apps+9
EPSS score
0.54%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
5.5CVE-2026-63517microsoft365_apps+13
EPSS score
0.54%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
7.8CVE-2026-63519microsoft365_apps+11
EPSS score
0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.