Microsoft Office 2021 vulnerabilities, page 4
465 vulnerabilities
Known vulnerabilities in Microsoft Office 2021, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-97749microsoft365_apps+5
EPSS score0.98%
Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.CVE-2026-97748microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97747microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97746microsoft365_apps+10EPSS score0.72%
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97745microsoft365_apps+9EPSS score0.78%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97744microsoft365_apps+9EPSS score0.50%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.CVE-2026-97743microsoft365_apps+7EPSS score0.83%
Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.CVE-2026-97742microsoft365_apps+10EPSS score0.78%
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97741microsoft365_apps+7EPSS score0.78%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97740microsoft365_apps+10EPSS score0.83%
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.CVE-2026-97739microsoft365_apps+10EPSS score0.78%
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97738microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97017microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97016microsoft365_apps+5EPSS score0.98%
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.CVE-2026-97014microsoft365_apps+5EPSS score0.50%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2026-97012microsoft365_apps+5EPSS score0.72%
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.CVE-2026-97011microsoft365_apps+9EPSS score0.72%
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97010microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97009microsoft365_apps+5EPSS score0.32%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-97008microsoft365_apps+10EPSS score0.72%
Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.