U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:x64:*
  • CPE Name Search: true
There are 347 matching records.
Displaying matches 1 through 20.
Vuln ID Summary CVSS Severity
CVE-2025-32704

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: May 13, 2025; 1:16:03 PM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2025-30386

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Published: May 13, 2025; 1:16:01 PM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2025-30383

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: May 13, 2025; 1:16:00 PM -0400 		V4.0:(not available)
 V3.x:(not available)
 V2.0:(not available)
CVE-2025-30381

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: May 13, 2025; 1:16:00 PM -0400 		V4.0:(not available)
 V3.x:(not available)
 V2.0:(not available)
CVE-2025-30379

Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: May 13, 2025; 1:16:00 PM -0400 		V4.0:(not available)
 V3.x:(not available)
 V2.0:(not available)
CVE-2025-30377

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Published: May 13, 2025; 1:16:00 PM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2025-30376

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: May 13, 2025; 1:16:00 PM -0400 		V4.0:(not available)
 V3.x:(not available)
 V2.0:(not available)
CVE-2025-30375

Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: May 13, 2025; 1:15:59 PM -0400 		V4.0:(not available)
 V3.x:(not available)
 V2.0:(not available)
CVE-2025-29979

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: May 13, 2025; 1:15:59 PM -0400 		V4.0:(not available)
 V3.x:(not available)
 V2.0:(not available)
CVE-2025-29977

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: May 13, 2025; 1:15:58 PM -0400 		V4.0:(not available)
 V3.x:(not available)
 V2.0:(not available)
CVE-2025-29822

Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally.

Published: April 08, 2025; 2:16:08 PM -0400 		V4.0:(not available)
 V3.x:(not available)
 V2.0:(not available)
CVE-2025-29820

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Published: April 08, 2025; 2:16:07 PM -0400 		V4.0:(not available)
 V3.x:(not available)
 V2.0:(not available)
CVE-2025-26630

Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally.

Published: March 11, 2025; 1:16:42 PM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2025-24083

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

Published: March 11, 2025; 1:16:33 PM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2025-24082

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: March 11, 2025; 1:16:33 PM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2025-24081

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: March 11, 2025; 1:16:32 PM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2025-24080

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Published: March 11, 2025; 1:16:31 PM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2025-24079

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Published: March 11, 2025; 1:16:31 PM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2025-24078

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Published: March 11, 2025; 1:16:30 PM -0400 		V4.0:(not available)
 V3.1: 7.0 HIGH
V2.0:(not available)
CVE-2025-24075

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Published: March 11, 2025; 1:16:30 PM -0400 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0:(not available)