Microsoft Office 2019 vulnerabilities, page 5
293 vulnerabilities
Known vulnerabilities in Microsoft Office 2019, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-55036microsoft365_apps+14
EPSS score0.47%
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-55140microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-55033microsoft365_apps+17EPSS score0.57%
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-55032microsoft365_apps+17EPSS score0.57%
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-65657microsoft365_apps+11EPSS score0.47%
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-65807microsoft365_apps+14EPSS score0.82%
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-65661microsoft365_apps+9EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-65664microsoft365_apps+11EPSS score0.47%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-65656microsoft365_apps+7EPSS score0.46%
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2026-62842microsoft365_apps+11EPSS score0.54%
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-62804microsoft365_apps+12EPSS score0.61%
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-62882microsoft365_apps+9EPSS score0.67%
Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.CVE-2026-62870microsoft365_apps+9EPSS score0.82%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-68802microsoft365_apps+14EPSS score0.54%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2026-68797microsoft365_apps+15EPSS score0.54%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2026-68800microsoft365_apps+6EPSS score0.47%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-68795microsoft365_apps+14EPSS score0.47%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-68807microsoft365_apps+14EPSS score0.47%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-68812microsoft365_apps+14EPSS score0.47%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-68810microsoft365_apps+14EPSS score0.47%
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.