Known Vulnerabilities for Word For Mac by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Word For Mac" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-116270 json | MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords. For each... | Not Provided | 2026-10-28 | 2026-10-28 |
| CVE-2026-116269 json | MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty r... | Not Provided | 2026-10-28 | 2026-10-28 |
| CVE-2026-116266 json | MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as... | Not Provided | 2026-10-28 | 2026-10-28 |
| CVE-2026-116265 json | MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continua... | Not Provided | 2026-10-28 | 2026-10-28 |
| CVE-2026-114726 json | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (re... | Not Provided | 2026-10-22 | 2026-10-28 |
| CVE-2026-112056 json | wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attac... | Not Provided | 2026-10-18 | 2026-10-19 |
| CVE-2026-111677 json | Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted bound... | Not Provided | 2026-10-16 | 2026-10-18 |
| CVE-2026-111601 json | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_id'... | Not Provided | 2026-10-17 | 2026-10-18 |
| CVE-2026-111138 json | NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_rle8() and bmp_decode_rle4() becaus... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-111131 json | libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a... | Not Provided | 2026-10-15 | 2026-10-15 |