CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Office Word Security Feature Bypass Vulnerability (CVE-2026-21514) Analysis and Mitigation Guide
[Affected Scope] Microsoft Office Word and associated Office suites
[Impact] Unauthorized local attackers can bypass critical security controls, such as Protected View or macro execution blocks, to execute arbitrary code
[Mitigation] Apply the official Microsoft security updates immediately and restrict execution of untrusted document files (.docx, .docm)
Microsoft Office Security Feature Bypass Vulnerability (CVE-2026-21509) Analysis and Mitigation Guide
[Affected Scope] All Microsoft Office suites and local environments processing untrusted document inputs.
[Impact] Attackers can bypass local security decisions, leading to unauthorized macro execution and arbitrary code execution.
[Mitigation] Apply official Microsoft security patches immediately and enforce strict macro blocking policies for untrusted files.
Microsoft Publisher Security Feature Bypass Vulnerability (CVE-2024-38226) Technical Advisory
[Affected Scope] Microsoft Publisher 2016, Office LTSC 2021, and Microsoft 365 Apps within supported lifecycles
[Impact] An attacker can bypass Office macro block policies and Mark of the Web (MOTW) security warnings to execute arbitrary code when a user opens a specially crafted Publisher file
[Mitigation] Apply the official Microsoft security updates immediately and enforce Group Policies to block macros in files originating from the Internet
Microsoft Project Remote Code Execution Vulnerability Advisory (CVE-2024-38189, CISA KEV Listed)
[Affected Scope] Microsoft Project 2016, LTSC Professional Plus 2021, and Microsoft 365 Apps for Enterprise
[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted Project (.mpp) file
[Mitigation] Apply the official Microsoft security updates immediately and enforce strict policies to block untrusted macro and external content execution
Microsoft Word Information Disclosure and NTLM Hash Leakage Vulnerability (CVE-2023-36761) Technical Analysis & Mitigation Guide
[Affected Scope] Broad range of Microsoft Office products including Microsoft Word 2013, 2016, 2019, 2021, and Microsoft 365 Apps
[Impact] Attackers can force the victim's system to leak NTLM credentials (hashes) to an external malicious server simply by having the victim select or preview a crafted document in the Preview Pane
[Mitigation] Apply the official Microsoft security updates immediately, block outbound SMB (TCP 445) traffic at the perimeter, and restrict outbound NTLM authentication via Group Policy
Windows Search Remote Code Execution Vulnerability (CVE-2023-36884) Security Advisory & Mitigation Guide
[Affected Scope] All endpoint systems running Microsoft Windows and Microsoft Office suites
[Impact] Remote attackers can execute arbitrary code with system privileges via specially crafted documents, leading to full system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or implement the registry-based workaround
Microsoft Outlook Security Feature Bypass Vulnerability (CVE-2023-35311) Security Advisory
[Affected Scope] Broad range of Microsoft Office products including Microsoft Outlook 2013, 2016, 2019, 2021, and Microsoft 365 Apps for Enterprise
[Impact] Attackers can bypass Outlook security warning prompts via specially crafted links, potentially leading to subsequent Remote Code Execution (RCE)
[Mitigation] Immediately apply the official Microsoft security patches and restrict untrusted link execution via Group Policy (GPO) or registry hardening
Microsoft Outlook Remote NTLM Credential Theft & Elevation of Privilege Vulnerability (CVE-2023-23397) Critical Security Advisory
[Affected Scope] All supported desktop versions of Microsoft Outlook for Windows, including Outlook 2013, 2016, LTSC 2021, and Microsoft 365 Apps
[Impact] Attackers can trigger the vulnerability silently without user interaction (Zero-Click) simply by sending a malicious email, leaking the user's NTLM hash to external servers for NTLM relay attacks
[Mitigation] Apply the official Microsoft security updates immediately, block outbound SMB traffic (TCP port 445) at the perimeter, and run the Exchange audit script to purge malicious items
Microsoft Publisher Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2023-21715) Analysis & Mitigation Guide
[Affected Scope] Microsoft Office and Microsoft Publisher 2013, 2016, 2019, 2021, and Microsoft 365 Apps
[Impact] Attackers can bypass Office macro blocking policies (Mark of the Web) via specially crafted Publisher files to execute arbitrary code
[Mitigation] Apply official Microsoft security patches immediately and enforce registry policies to disable Publisher macros
Microsoft Windows MSDT Remote Code Execution Vulnerability (Follina, CVE-2022-30190) Security Advisory
[Affected Scope] Windows Operating Systems and Microsoft Office applications utilizing the Microsoft Support Diagnostics Tool (MSDT) protocol
[Impact] Remote attackers can execute arbitrary code with the privileges of the calling application, potentially taking full control of the system
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the MSDT URL protocol handler via registry modification
Microsoft Excel Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2021-42292) Analysis & Mitigation Guide
[Affected Scope] Broad range of Microsoft Office suites including Microsoft Excel 2013, 2016, 2019, 2021, Microsoft 365 Apps, and Office LTSC 2021
[Impact] Attackers can bypass security warnings and Protected View to execute arbitrary code with the user's privileges by tricking them into opening a specially crafted Excel file
[Mitigation] Apply official Microsoft security patches immediately, restrict execution of untrusted email attachments, and enforce strict macro blocking policies
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability (CVE-2021-38646) Security Advisory
[Affected Scope] Microsoft Office, Microsoft 365 Apps, and Access Database Engine Redistributable packages
[Impact] Successful exploitation allows an attacker to execute arbitrary remote code (RCE) with the privileges of the active user by tricking them into opening a crafted database file
[Mitigation] Apply the official Microsoft security updates immediately and restrict execution of untrusted database files
Microsoft Excel Memory Corruption Remote Code Execution Vulnerability (CVE-2019-1297) Analysis and Mitigation Guide
[Affected Scope] Multiple Microsoft Office and Excel versions including Excel 2010, 2013, 2016, 2019, and Office 365 ProPlus
[Impact] Successful exploitation allows remote attackers to execute arbitrary code in the context of the current user by tricking them into opening a specially crafted Excel file
[Mitigation] Apply official Microsoft security patches immediately and enforce strict attachment filtering policies
Microsoft Office & Word Memory Corruption Remote Code Execution Vulnerability (CVE-2017-11826) Technical Advisory
[Affected Scope] Microsoft Office 2010, Word 2007/2010/2013/2016, SharePoint Server 2010, Office Web Apps Server 2010/2013, and Word Viewer.
[Impact] Successful exploitation allows remote attackers to execute arbitrary code in the context of the current user by tricking them into opening a specially crafted OOXML document.
[Mitigation] Apply official Microsoft security patches immediately, restrict opening untrusted email attachments, and enable Attack Surface Reduction (ASR) rules.
Microsoft Office OLE Composite Moniker Remote Code Execution Vulnerability (CVE-2017-8570) Analysis and Mitigation Guide
[Affected Scope] Microsoft Office 2007, 2010, 2013, 2016 and related productivity components
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user via crafted Office documents containing malicious OLE objects
[Mitigation] Apply official Microsoft security patches immediately and restrict the execution of untrusted OLE/ActiveX components
Microsoft Office Remote Code Execution Vulnerability (CVE-2017-0262) Security Advisory
[Affected Scope] Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016
[Impact] Remote attackers can execute arbitrary code in the context of the current user by tricking them into opening a document containing a malicious EPS file
[Mitigation] Apply official Microsoft security patches immediately, or disable the EPS filter via registry modification
Microsoft Office Remote Code Execution Vulnerability (CVE-2017-0261) Security Advisory and Mitigation Guide
[Affected Scope] Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016.
[Impact] Remote attackers can execute arbitrary code in the context of the current user and fully compromise the target system via crafted Office documents.
[Mitigation] Apply official Microsoft security patches immediately or disable the vulnerable EPS (Encapsulated PostScript) filter via registry modification.
Microsoft Excel Remote Code Execution and Security Feature Bypass Vulnerability (CVE-2016-7262)
[Affected Scope] Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer
[Impact] User-assisted remote attackers can execute arbitrary commands with the logged-in user's privileges by tricking a user into clicking a crafted cell
[Mitigation] Apply the official Microsoft MS16-148 security update immediately and restrict opening untrusted Office documents
Microsoft Office and Word Memory Corruption Remote Code Execution Vulnerability (CVE-2016-7193, MS16-121)
[Affected Scope] Microsoft Word 2007 to 2016, Word for Mac 2011/2016, Word Automation Services on SharePoint Server, Office Web Apps, and Office Online Server.
[Impact] Remote attackers can execute arbitrary code under the security context of the current user by tricking them into opening a specially crafted RTF document.
[Mitigation] Apply the official MS16-121 security updates immediately, or implement File Block policies via Registry/GPO to restrict RTF document parsing.
Microsoft Office EPS Image Parsing Remote Code Execution Vulnerability (CVE-2015-2545) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user and compromise the host system by tricking a user into opening a document containing a malformed EPS image
[Mitigation] Apply the official MS15-099 security update immediately, or disable the EPS graphics filter via registry modifications to prevent exploitation