Is itCheck something

Attack list

Microsoft Office

43 attacked bugs

Attackers used Microsoft Office bugs this year.

What to do

Open Word, then File, then Account, then Update Options, then Update Now. On a Mac: Help, then Check for Updates.

Attackers keep using these against anything that hasn't updated. Updating closes them.

BugConfirmed in attacks

  1. Microsoft Office bug: remote code executionCVE-2009-0238Apr 14, 2026
  2. Microsoft Office bug: word reliance on untrusted inputs in a security decisionCVE-2026-21514Feb 10, 2026
  3. Microsoft Office bug: security feature bypassCVE-2026-21509Jan 26, 2026
  4. Microsoft Office bug: powerpoint code injectionCVE-2009-0556Jan 7, 2026
  5. Microsoft Office bug: excel remote code executionCVE-2007-0671Aug 12, 2025
  6. Microsoft Office Outlook bug: improper input validationCVE-2024-21413Feb 6, 2025
  7. Microsoft Publisher bug: protection mechanism failureCVE-2024-38226Sep 10, 2024
  8. Microsoft WordPad bug: information disclosureCVE-2023-36563Oct 10, 2023
  9. Microsoft Word bug: information disclosureCVE-2023-36761Sep 12, 2023
  10. Microsoft Outlook bug: security feature bypassCVE-2023-35311Jul 11, 2023
  11. Microsoft Office bug: outlook privilege escalationCVE-2023-23397Mar 14, 2023
  12. Microsoft Office bug: publisher security feature bypassCVE-2023-21715Feb 14, 2023
  13. Microsoft Office bug: buffer overflowCVE-2013-1331Jun 8, 2022
  14. Microsoft PowerPoint bug: buffer overflowCVE-2010-2572Jun 8, 2022
  15. Microsoft Office bug: buffer overflowCVE-2009-0563Jun 8, 2022
  16. Microsoft Office bug: object record corruptionCVE-2009-0557Jun 8, 2022
  17. Microsoft Word bug: malformed object pointerCVE-2006-2492Jun 8, 2022
  18. Microsoft Office bug: access connectivity engine remote code executionCVE-2021-38646Mar 28, 2022
  19. Microsoft Office bug: uninitialized memory useCVE-2015-1770Mar 28, 2022
  20. Microsoft Word bug: remote code executionCVE-2012-2539Mar 28, 2022
  21. Microsoft Excel bug: remote code executionCVE-2019-1297Mar 3, 2022
  22. Microsoft Office bug: remote code executionCVE-2017-11826Mar 3, 2022
  23. Microsoft Office bug: use-after-freeCVE-2017-0261Mar 3, 2022
  24. Microsoft Excel bug: office security feature bypassCVE-2016-7262Mar 3, 2022
  25. Microsoft Office bug: memory corruptionCVE-2016-7193Mar 3, 2022
  26. Microsoft Office bug: malformed eps fileCVE-2015-2545Mar 3, 2022
  27. Microsoft PowerPoint bug: memory corruptionCVE-2015-2424Mar 3, 2022
  28. Microsoft Office bug: memory corruptionCVE-2015-1642Mar 3, 2022
  29. Microsoft Office bug: mscomctl.ocx remote code executionCVE-2012-1856Mar 3, 2022
  30. Microsoft Office bug: stack-based buffer overflowCVE-2010-3333Mar 3, 2022
  31. Microsoft Excel bug: featheader record memory corruptionCVE-2009-3129Mar 3, 2022
  32. Microsoft Office bug: remote code executionCVE-2017-8570Feb 25, 2022
  33. Microsoft Word bug: memory corruptionCVE-2014-1761Feb 15, 2022
  34. Microsoft Office bug: remote code executionCVE-2017-0262Feb 10, 2022
  35. Microsoft Office bug: excel security feature bypassCVE-2021-42292Nov 17, 2021
  36. Microsoft Office bug: memory corruptionCVE-2018-0798Nov 3, 2021
  37. Microsoft Office bug: memory corruptionCVE-2018-0802Nov 3, 2021
  38. Microsoft Office bug: memory corruptionCVE-2015-1641Nov 3, 2021
  39. Microsoft Office bug: memory corruptionCVE-2017-11882Nov 3, 2021
  40. Microsoft Office bug: remote code executionCVE-2021-27059Nov 3, 2021
  41. Microsoft Office and WordPad bug: wordpad remote code executionCVE-2017-0199Nov 3, 2021
  42. Microsoft Office bug: outlook security feature bypassCVE-2017-11774Nov 3, 2021
  43. Microsoft Office bug: ole DLL side loadingCVE-2016-3235Nov 3, 2021

From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.