Product of Microsoft
Office, page 2
As of , 29 Microsoft Office vulnerabilities are on CISA's list of exploited vulnerabilities, 3 of them used in ransomware campaigns; 4 were added in 2026. Patch first: CVE-2010-3333.
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 26 | CVE-2021-42292Excel Security Feature Bypass | Microsoft Office | Patch soon | 0.43 | ||
| 27 | CVE-2023-21715Publisher Security Feature Bypass | Microsoft Office | Patch soon | 0.12 | ||
| 28 | CVE-2021-27059Remote Code Execution | Microsoft Office | Patch soon | 0.06 | ||
| 29 | CVE-2026-21514Word Reliance on Untrusted Inputs in a Security Decision | Microsoft Office | Patch soon | 0.02 |