Class familyMicrosoft · Office

Microsoft Office out-of-bounds write flaws, 2009–2026

9 Office CVEs with CWE-787 weaknesses, 10 Jun 2009 to 13 Oct 2026. 6 are in .

CVEs by year

Published each year. Select a CVE to open it.

Grouped by product and weakness type (CWE); not proven to share a root cause.

1 2009’09

1 2010’10

2011’11

2012’12

2013’13

2014’14

2 2015’15

2016’16

2017’17

2 2018’18

2019’19

2020’20

2021’21

2022’22

2023’23

2024’24

2025’25

3 2026’26

In CISA KEVNot in KEV

Table view of the years above

CVE	Published	Title	Linked from	Priority
CVE-2009-0563KEV	10 Jun 2009	Microsoft Office Buffer Overflow Vulnerability	Grouped by weakness	63.3
CVE-2010-3333KEV	10 Nov 2010	Microsoft Office Stack-based Buffer Overflow Vulnerability	Grouped by weakness	78.4
CVE-2015-1641KEV	14 Apr 2015	Microsoft Office Memory Corruption Vulnerability	Grouped by weakness	87.4
CVE-2015-1642KEV	15 Aug 2015	Microsoft Office Memory Corruption Vulnerability	Grouped by weakness	63.3
CVE-2018-0798KEV	10 Jan 2018	Microsoft Office Memory Corruption Vulnerability	Grouped by weakness	79.1
CVE-2018-0802KEV	10 Jan 2018	Microsoft Office Memory Corruption Vulnerability	Grouped by weakness	88.4
CVE-2026-68806	11 Aug 2026	Microsoft Excel Remote Code Execution Vulnerability	Grouped by weakness	13.5
CVE-2026-78524	8 Sep 2026	Microsoft Office Remote Code Execution Vulnerability	Grouped by weakness	17.6
CVE-2026-97762	13 Oct 2026	Microsoft Office Excel Remote Code Execution Vulnerability	Grouped by weakness	17.8