Skip to content

Known vulnerabilities in Microsoft Office LTSC 2024

Is your version affected?

CVE Summary Score Published
CVE-2026-33115 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally 8.4 High Apr 14, 2026
CVE-2026-33114 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally 8.4 High Apr 14, 2026
CVE-2026-32200 Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally 7.8 High Apr 14, 2026
CVE-2026-32199 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Apr 14, 2026
CVE-2026-32197 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Apr 14, 2026
CVE-2026-32198 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Apr 14, 2026
CVE-2026-32190 Use after free in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High Apr 14, 2026
CVE-2026-23657 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Apr 14, 2026
CVE-2026-33095 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High Apr 14, 2026
CVE-2026-32189 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Apr 14, 2026
CVE-2026-32188 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally 7.1 High Apr 14, 2026
CVE-2026-26109 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally 8.4 High Mar 10, 2026
CVE-2026-26110 Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to… 8.4 High Mar 10, 2026
CVE-2026-26107 Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Mar 10, 2026
CVE-2026-26108 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Mar 10, 2026
CVE-2026-26113 Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally 8.4 High Mar 10, 2026
CVE-2026-26112 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Mar 10, 2026
CVE-2026-21261 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally 5.5 Medium Feb 10, 2026
CVE-2026-21511 Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a… 7.5 High Feb 10, 2026
CVE-2026-21514 Exploited Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability 7.8 High Feb 10, 2026
CVE-2026-21258 Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally 5.5 Medium Feb 10, 2026
CVE-2026-21260 Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker… 7.5 High Feb 10, 2026
CVE-2026-21259 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to elevate privileges locally 7.8 High Feb 10, 2026
CVE-2026-21509 Exploited Microsoft Office Security Feature Bypass Vulnerability 7.8 High Jan 26, 2026
CVE-2026-20957 Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally 7.8 High Jan 13, 2026

Other Microsoft products