Skip to content

Known vulnerabilities in Microsoft Office 2019

Is your version affected?

CVE Summary Score Published
CVE-2026-45460 Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information locally 4.7 Medium Jun 9, 2026
CVE-2026-45458 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High Jun 9, 2026
CVE-2026-45456 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to… 8.4 High Jun 9, 2026
CVE-2026-44824 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Jun 9, 2026
CVE-2026-44821 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally 5.5 Medium Jun 9, 2026
CVE-2026-44823 Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Jun 9, 2026
CVE-2026-44820 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Jun 9, 2026
CVE-2026-44818 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel… 7.0 High Jun 9, 2026
CVE-2026-44819 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Jun 9, 2026
CVE-2026-44817 Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized… 7.8 High Jun 9, 2026
CVE-2026-45485 Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally 3.3 Low Jun 9, 2026
CVE-2026-45474 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High Jun 9, 2026
CVE-2026-45471 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Jun 9, 2026
CVE-2026-45472 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High Jun 9, 2026
CVE-2026-45475 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally 7.8 High Jun 9, 2026
CVE-2026-45469 Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Jun 9, 2026
CVE-2026-40420 Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally 8.8 High May 12, 2026
CVE-2026-35436 Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally 8.8 High May 12, 2026
CVE-2026-40418 Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-40367 Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker… 8.4 High May 12, 2026
CVE-2026-40362 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High May 12, 2026
CVE-2026-40361 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High May 12, 2026
CVE-2026-40359 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High May 12, 2026
CVE-2026-40358 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High May 12, 2026
CVE-2026-40419 Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026

Other Microsoft products