Microsoft Office 2024 vulnerabilities
434 vulnerabilities
Known vulnerabilities in Microsoft Office 2024, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-108455microsoft365_apps+9
EPSS score0.51%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2026-108454microsoft365_apps+9EPSS score0.51%
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2026-108453microsoft365_apps+9EPSS score0.53%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2026-108451microsoft365_apps+5EPSS score0.44%
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108450microsoft365_apps+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108449microsoft365_apps+9EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108448microsoft365_apps+9EPSS score0.35%
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.CVE-2026-108447microsoft365_apps+5EPSS score0.44%
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108446microsoft365_apps+10EPSS score0.44%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-108445microsoft365_apps+9EPSS score0.44%
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-108444microsoft365_apps+9EPSS score0.44%
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.CVE-2026-108443microsoft365_apps+9EPSS score0.44%
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-102850microsoft365_apps+5EPSS score0.63%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-102849microsoft365_apps+5EPSS score0.63%
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.CVE-2026-97780microsoft365_apps+10EPSS score0.78%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97779microsoft365_apps+10EPSS score0.83%
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.CVE-2026-97778microsoft365_apps+10EPSS score0.59%
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97777microsoft365_apps+10EPSS score0.72%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97776microsoft365_apps+10EPSS score0.78%
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.CVE-2026-97775microsoft365_apps+10EPSS score0.72%
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.