Known Vulnerabilities for Office Word by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Office Word" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-45643 json | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Not Provided | 2026-06-09 | 2026-06-19 |
| CVE-2026-45486 json | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Not Provided | 2026-06-09 | 2026-06-19 |
| CVE-2026-45471 json | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Not Provided | 2026-06-09 | 2026-06-19 |
| CVE-2026-45466 json | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | Not Provided | 2026-06-09 | 2026-06-19 |
| CVE-2026-45457 json | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. | Not Provided | 2026-06-09 | 2026-06-19 |
| CVE-2026-41101 json | Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally. | Not Provided | 2026-05-12 | 2026-05-15 |
| CVE-2026-40421 json | Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose info... | Not Provided | 2026-05-12 | 2026-06-01 |
| CVE-2026-40367 json | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to exe... | Not Provided | 2026-05-12 | 2026-06-01 |
| CVE-2026-40366 json | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to exe... | Not Provided | 2026-05-12 | 2026-06-01 |
| CVE-2026-40364 json | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to exe... | Not Provided | 2026-05-12 | 2026-05-18 |