Product by Microsoft
Microsoft Office 2019
695 known vulnerabilities in Microsoft Office 2019 (Microsoft), 9 of them actively exploited (CISA KEV).
Key figures
695
Vulnerabilities
9
Actively exploited (KEV)
1
Used by ransomware
15
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2021-38646 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2026-21509 | Microsoft Office Security Feature Bypass Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2023-23397 | Microsoft Outlook Elevation of Privilege Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2023-35311 | Microsoft Outlook Security Feature Bypass Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2024-38189 | Microsoft Project Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2021-42292 | Microsoft Excel Security Feature Bypass Vulnerability In CISA KEV | 7.8 | |
| Critical | CVE-2023-36761 | Microsoft Word Information Disclosure Vulnerability In CISA KEV | 6.5 | |
| Critical | CVE-2024-38226 | Microsoft Publisher Security Feature Bypass Vulnerability In CISA KEV | 7.3 | |
| Critical | CVE-2023-21716 | Microsoft Word Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2024-21378 | Microsoft Outlook Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2023-36041 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2023-32029 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2023-33133 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-34501 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-34478 | Microsoft Office Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2026-21511 | Microsoft Outlook Spoofing Vulnerability | 7.5 | |
| High | CVE-2022-35742 | Microsoft Outlook Denial of Service Vulnerability | 7.5 | |
| High | CVE-2023-33131 | Microsoft Outlook Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-43504 | Microsoft Excel Remote Code Execution Vulnerability | 7.8 | |
| Critical | CVE-2020-0901 | Microsoft Excel Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2025-47994 | Microsoft Office Elevation of Privilege Vulnerability | 7.8 | |
| High | CVE-2020-16947 | Microsoft Outlook Remote Code Execution Vulnerability | 7.5 | |
| Medium | CVE-2024-38200 | Microsoft Office Spoofing Vulnerability | 6.5 | |
| Critical | CVE-2019-1205 | Microsoft Word Remote Code Execution Vulnerability | 9.8 |
News
- NCSC-2026-0352 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- NCSC-2026-0286 [1.01] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- NCSC-2026-0286 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,
- NCSC-2026-0237 [1.02] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,
- NCSC-2026-0237 [1.01] [H/H] Kwetsbaarheden verholpen in Microsoft Officencsc-nl,