Microsoft Office 2019 vulnerabilities, page 3
293 vulnerabilities
Known vulnerabilities in Microsoft Office 2019, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-55136microsoft365_apps+14
EPSS score0.47%
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-55057microsoft365_apps+13EPSS score0.54%
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55898microsoft365_apps+14EPSS score0.47%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2026-55056microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55899microsoft365_apps+14EPSS score0.47%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-55128microsoft365_apps+18EPSS score0.57%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-55048microsoft365_apps+14EPSS score0.47%
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-55026microsoft365_apps+17EPSS score0.45%
Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55042microsoft365_apps+13EPSS score0.54%
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55028microsoft365_apps+17EPSS score0.60%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55139microsoft365_apps+13EPSS score0.48%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55024microsoft365_apps+14EPSS score0.47%
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-55047microsoft365_apps+17EPSS score0.60%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55124microsoft365_apps+18EPSS score0.60%
Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-55049microsoft365_apps+12EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55018microsoft365_apps+13EPSS score0.47%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55035microsoft365_apps+17EPSS score0.57%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-55043microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2026-55125microsoft365_apps+17EPSS score0.57%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55138microsoft365_apps+14EPSS score0.54%
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.