Known Vulnerabilities for Office Word by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Office Word" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-41101 json | Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-40421 json | External control of file name or path in Microsoft Office Word allows an unauthorized attacker to disclose information over a... | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-40367 json | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-40366 json | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-40364 json | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to exe... | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-40361 json | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-35440 json | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose info... | Not Provided | 2026-05-12 | 2026-05-13 |
| CVE-2026-33822 json | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Not Provided | 2026-04-14 | 2026-04-28 |
| CVE-2026-33115 json | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Not Provided | 2026-04-14 | 2026-04-28 |
| CVE-2026-33114 json | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Not Provided | 2026-04-14 | 2026-04-28 |