Microsoft Office vulnerabilities: known CVEs & security history

Microsoft · Office / Productivity · 147 tracked CVEs · 5 actively exploited · updated November 2026 · what is a CVE? →

This is the full list of known vulnerabilities (CVEs) across all Microsoft Office release lines — 147 in total, with 5 actively exploited in the wild. A CVE here doesn't mean your version is affected — check Microsoft Office's current status and the safe version to run.

Known Microsoft Office CVEs

Actively-exploited and most-severe first. Showing the top 80 of 147. Open any CVE for full details.

67 older / lower-severity CVEs not shown — see Microsoft Office's full record.

Is my Microsoft Office version affected?

The list above spans every release. To know whether your version is affected — and the minimum safe version to upgrade to — check it directly.

Check your Microsoft Office version → · Monitor Microsoft Office for new CVEs →

Microsoft Office vulnerabilities — frequently asked

CVE data aggregated from NVD, CISA KEV and EPSS (FIRST.org). Related: Microsoft Office security status · Microsoft Office end-of-life · actively-exploited CVEs. Always verify against Microsoft's advisories — see our disclaimer.