MO
Product
Microsoft Office 2019
On CISA KEVExploited in the wildRansomware-linked
504
CVEs
9
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 375Medium 120Low 2
Watch
Add Microsoft Office 2019 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-70105 | 7.5 | Aug 20 | Microsoft Word Information Disclosure Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-21511 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-21260 | 7.5 | Feb 10 | Microsoft Outlook Spoofing Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-29816 | 7.5 | Apr 8 | Microsoft Word Security Feature Bypass Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2024-49033 | 7.5 | Nov 12 | Microsoft Word Security Feature Bypass Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2024-30101 | 7.5 | Jun 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-69477 | 7.3 | Sep 8 | Microsoft Office Access Remote Code Execution Vulnerability Affected: 19.0.0 before 16.0.10417.20207 |
| CVE-2025-29792 | 7.3 | Apr 8 | Microsoft Office Elevation of Privilege Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2022-33631 | 7.3 | Aug 9 | Microsoft Excel Security Feature Bypass Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-55898 | 7.1 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-55122 | 7.1 | Jul 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-32188 | 7.1 | Apr 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-62202 | 7.1 | Nov 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-60726 | 7.1 | Nov 11 | Microsoft Excel Information Disclosure Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-59232 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-59235 | 7.1 | Oct 14 | Microsoft Excel Information Disclosure Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-54905 | 7.1 | Sep 9 | Microsoft Word Information Disclosure Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-81389 | 7.0 | Sep 8 | Microsoft Excel Remote Code Execution Vulnerability Affected: 19.0.0 before 16.0.10417.20207 |
| CVE-2026-47293 | 7.0 | Jun 9 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2026-44818 | 7.0 | Jun 9 | Microsoft Excel Remote Code Execution Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-62555 | 7.0 | Dec 9 | Microsoft Word Remote Code Execution Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-59221 | 7.0 | Oct 14 | Microsoft Word Remote Code Execution Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-49699 | 7.0 | Jul 8 | Microsoft Office Remote Code Execution Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2025-24078 | 7.0 | Mar 11 | Microsoft Word Remote Code Execution Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
| CVE-2024-49059 | 7.0 | Dec 10 | Microsoft Office Elevation of Privilege Vulnerability Affected: 19.0.0 before https://aka.ms/OfficeSecurityReleases |
The 500 most important CVEs for this product (exploited first, then by severity)