office_2021 vulnerabilities
CVEs whose affected-version data names the office_2021 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
244 CVEsRSS
CVE-2026-50387High· 7.8Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
▾ Twilightmicrosoft · 365_copilotEPSS 0.33%via NVD
CVE-2026-55125High· 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
▾ Twilightmicrosoft · 365_appsEPSS 0.57%via NVD
CVE-2023-35311High· 8.8CISA KEV0dayPoCMicrosoft Outlook Security Feature Bypass Vulnerability
Microsoft Outlook Security Feature Bypass Vulnerability
▾ Abyssalmicrosoft · 365_appsEPSS 16%via NVD
CVE-2021-42292High· 7.8CISA KEVPoCMicrosoft Excel Security Feature Bypass Vulnerability
Microsoft Excel Security Feature Bypass Vulnerability
▾ Abyssalmicrosoft · 365_appsEPSS 43%via NVD