Microsoft Office: known exploited vulnerabilities
Entries29
Ransomware-linked3
First added2021-11-03
Latest2026-04-14
EPSS compared
99.9%
97.1%
96.6%
95.1%
93.2%
89.8%
89.4%
85.9%
81.1%
81.0%
79.8%
78.1%
72.0%
70.7%
67.3%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2009-0238 | Microsoft Office | 2026-04-14 | 43.2% | Unknown |
| CVE-2026-21514 | Microsoft Office | 2026-02-10 | 1.6% | Unknown |
| CVE-2026-21509 | Microsoft Office | 2026-01-26 | 70.7% | Unknown |
| CVE-2009-0556 | Microsoft Office | 2026-01-07 | 67.3% | Unknown |
| CVE-2007-0671 | Microsoft Office | 2025-08-12 | 43.2% | Unknown |
| CVE-2023-23397 | Microsoft Office | 2023-03-14 | 97.1% | Unknown |
| CVE-2023-21715 | Microsoft Office | 2023-02-14 | 12.0% | Unknown |
| CVE-2013-1331 | Microsoft Office | 2022-06-08 | 79.8% | Unknown |
| CVE-2009-0563 | Microsoft Office | 2022-06-08 | 62.8% | Unknown |
| CVE-2009-0557 | Microsoft Office | 2022-06-08 | 53.0% | Unknown |
| CVE-2021-38646 | Microsoft Office | 2022-03-28 | 7.9% | Known |
| CVE-2015-1770 | Microsoft Office | 2022-03-28 | 34.9% | Unknown |
| CVE-2017-11826 | Microsoft Office | 2022-03-03 | 81.1% | Unknown |
| CVE-2017-0261 | Microsoft Office | 2022-03-03 | 78.1% | Unknown |
| CVE-2016-7193 | Microsoft Office | 2022-03-03 | 57.5% | Unknown |
| CVE-2015-2545 | Microsoft Office | 2022-03-03 | 85.9% | Unknown |
| CVE-2015-1642 | Microsoft Office | 2022-03-03 | 53.0% | Unknown |
| CVE-2012-1856 | Microsoft Office | 2022-03-03 | 72.0% | Unknown |
| CVE-2010-3333 | Microsoft Office | 2022-03-03 | 89.4% | Unknown |
| CVE-2017-8570 | Microsoft Office | 2022-02-25 | 89.8% | Unknown |
| CVE-2017-0262 | Microsoft Office | 2022-02-10 | 81.0% | Unknown |
| CVE-2021-42292 | Microsoft Office | 2021-11-17 | 43.0% | Unknown |
| CVE-2021-27059 | Microsoft Office | 2021-11-03 | 6.0% | Unknown |
| CVE-2018-0802 | Microsoft Office | 2021-11-03 | 93.2% | Known |
| CVE-2018-0798 | Microsoft Office | 2021-11-03 | 95.1% | Unknown |
| CVE-2017-11882 | Microsoft Office | 2021-11-03 | 99.9% | Known |
| CVE-2017-11774 | Microsoft Office | 2021-11-03 | 59.6% | Unknown |
| CVE-2016-3235 | Microsoft Office | 2021-11-03 | 43.3% | Unknown |
| CVE-2015-1641 | Microsoft Office | 2021-11-03 | 96.6% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.