{"schema_version":1,"title":"Microsoft Word vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 29 vulnerabilities in Microsoft Word: 0 in the last 7 days and 11 in the last 90 days, 6 of them critical and 6 exploited in the wild. The most recent, CVE-2026-78511, was published on 8 September 2026.","url":"https://junglewise.ai/threats/technologies/word","json_url":"https://junglewise.ai/threats/technologies/word.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/word","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":18,"all_time":29,"critical":6,"exploited":6,"last_7_days":0,"last_30_days":2,"last_90_days":11,"last_365_days":24},"latest":[{"cve":"CVE-2026-78511","cvss":8.8,"epss":0.0082,"slug":"cve-2026-78511-microsoft-word-heap-based-buffer-overflow","title":"Microsoft Word heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:46.327+00:00","url":"https://junglewise.ai/threats/cve-2026-78511-microsoft-word-heap-based-buffer-overflow"},{"cve":"CVE-2026-69764","cvss":8.8,"epss":0.0082,"slug":"cve-2026-69764-microsoft-office-word-heap-based-buffer-overflow","title":"Microsoft Office Word heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:19:47.713+00:00","url":"https://junglewise.ai/threats/cve-2026-69764-microsoft-office-word-heap-based-buffer-overflow"},{"cve":"CVE-2026-55142","cvss":5.5,"slug":"cve-2026-55142-microsoft-office-word-numeric-truncation-information-disclosure","title":"Microsoft Office Word numeric truncation information disclosure","severity":"medium","exploited":false,"published_at":"2026-07-14T18:18:21.273+00:00","url":"https://junglewise.ai/threats/cve-2026-55142-microsoft-office-word-numeric-truncation-information-disclosure"},{"cve":"CVE-2026-55134","cvss":7.8,"slug":"cve-2026-55134-microsoft-office-word-stack-based-buffer-overflow","title":"Microsoft Office Word stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-07-14T18:18:20.163+00:00","url":"https://junglewise.ai/threats/cve-2026-55134-microsoft-office-word-stack-based-buffer-overflow"},{"cve":"CVE-2026-55130","cvss":7.8,"slug":"cve-2026-55130-microsoft-office-word-heap-buffer-overflow","title":"Microsoft Office Word heap buffer overflow","severity":"high","exploited":false,"published_at":"2026-07-14T18:18:19.587+00:00","url":"https://junglewise.ai/threats/cve-2026-55130-microsoft-office-word-heap-buffer-overflow"},{"cve":"CVE-2026-55128","cvss":7.8,"slug":"cve-2026-55128-microsoft-office-word-use-after-free-code-execution","title":"Microsoft Office Word use after free code execution","severity":"high","exploited":false,"published_at":"2026-07-14T18:18:19.32+00:00","url":"https://junglewise.ai/threats/cve-2026-55128-microsoft-office-word-use-after-free-code-execution"},{"cve":"CVE-2026-55127","cvss":7.8,"slug":"cve-2026-55127-microsoft-office-word-heap-overflow-code-execution","title":"Microsoft Office Word heap overflow code execution","severity":"high","exploited":false,"published_at":"2026-07-14T18:18:19.18+00:00","url":"https://junglewise.ai/threats/cve-2026-55127-microsoft-office-word-heap-overflow-code-execution"},{"cve":"CVE-2026-55124","cvss":5.5,"slug":"cve-2026-55124-microsoft-office-word-information-disclosure-via-improper-input","title":"Microsoft Office Word information disclosure via improper input validation","severity":"medium","exploited":false,"published_at":"2026-07-14T18:18:18.767+00:00","url":"https://junglewise.ai/threats/cve-2026-55124-microsoft-office-word-information-disclosure-via-improper-input"},{"cve":"CVE-2026-55055","cvss":7.8,"slug":"cve-2026-55055-microsoft-office-word-stack-based-buffer-overflow","title":"Microsoft Office Word stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-07-14T18:18:17.683+00:00","url":"https://junglewise.ai/threats/cve-2026-55055-microsoft-office-word-stack-based-buffer-overflow"},{"cve":"CVE-2026-55038","cvss":7.8,"slug":"cve-2026-55038-microsoft-office-word-stack-based-buffer-overflow","title":"Microsoft Office Word stack-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-07-14T18:18:15.083+00:00","url":"https://junglewise.ai/threats/cve-2026-55038-microsoft-office-word-stack-based-buffer-overflow"},{"cve":"CVE-2026-55033","cvss":7.8,"slug":"cve-2026-55033-microsoft-office-word-integer-overflow-code-execution","title":"Microsoft Office Word integer overflow code execution","severity":"high","exploited":false,"published_at":"2026-07-14T18:18:14.293+00:00","url":"https://junglewise.ai/threats/cve-2026-55033-microsoft-office-word-integer-overflow-code-execution"},{"cve":"CVE-2026-45643","cvss":7.8,"slug":"cve-2026-45643-microsoft-office-word-untrusted-pointer-dereference","title":"Microsoft Office Word untrusted pointer dereference","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:31.41+00:00","url":"https://junglewise.ai/threats/cve-2026-45643-microsoft-office-word-untrusted-pointer-dereference"},{"cve":"CVE-2026-45486","cvss":7.8,"slug":"cve-2026-45486-microsoft-office-word-untrusted-pointer-dereference","title":"Microsoft Office Word untrusted pointer dereference","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:23.193+00:00","url":"https://junglewise.ai/threats/cve-2026-45486-microsoft-office-word-untrusted-pointer-dereference"},{"cve":"CVE-2026-45471","cvss":7.8,"slug":"cve-2026-45471-microsoft-office-word-untrusted-pointer-dereference","title":"Microsoft Office Word untrusted pointer dereference","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:21.6+00:00","url":"https://junglewise.ai/threats/cve-2026-45471-microsoft-office-word-untrusted-pointer-dereference"},{"cve":"CVE-2026-45466","cvss":3.3,"slug":"cve-2026-45466-microsoft-word-heap-buffer-overflow-information-disclosure","title":"Microsoft Word heap buffer overflow information disclosure","severity":"low","exploited":false,"published_at":"2026-06-09T17:17:21.077+00:00","url":"https://junglewise.ai/threats/cve-2026-45466-microsoft-word-heap-buffer-overflow-information-disclosure"},{"cve":"CVE-2026-45457","cvss":7.8,"slug":"cve-2026-45457-microsoft-office-word-untrusted-pointer-dereference","title":"Microsoft Office Word untrusted pointer dereference","severity":"high","exploited":false,"published_at":"2026-06-09T17:17:19.937+00:00","url":"https://junglewise.ai/threats/cve-2026-45457-microsoft-office-word-untrusted-pointer-dereference"},{"cve":"CVE-2026-41101","cvss":7.1,"epss":0.0004,"slug":"cve-2026-41101-microsoft-office-word-improper-access-control-spoofing","title":"Microsoft Office Word improper access control spoofing vulnerability","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:21.63+00:00","url":"https://junglewise.ai/threats/cve-2026-41101-microsoft-office-word-improper-access-control-spoofing"},{"cve":"CVE-2026-40421","cvss":4.3,"epss":0.0005,"slug":"cve-2026-40421-microsoft-office-word-information-disclosure-via-path-traversal","title":"Microsoft Office Word information disclosure via path traversal","severity":"medium","exploited":false,"published_at":"2026-05-12T18:17:20.32+00:00","url":"https://junglewise.ai/threats/cve-2026-40421-microsoft-office-word-information-disclosure-via-path-traversal"},{"cve":"CVE-2026-40367","cvss":8.4,"epss":0.0006,"slug":"cve-2026-40367-microsoft-office-word-untrusted-pointer-dereference","title":"Microsoft Office Word untrusted pointer dereference","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:15.76+00:00","url":"https://junglewise.ai/threats/cve-2026-40367-microsoft-office-word-untrusted-pointer-dereference"},{"cve":"CVE-2026-40366","cvss":8.4,"epss":0.0006,"slug":"cve-2026-40366-microsoft-office-word-use-after-free-code-execution","title":"Microsoft Office Word use after free code execution","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:15.61+00:00","url":"https://junglewise.ai/threats/cve-2026-40366-microsoft-office-word-use-after-free-code-execution"},{"cve":"CVE-2026-40364","cvss":8.4,"epss":0.0019,"slug":"cve-2026-40364-microsoft-office-word-type-confusion-local-code-execution","title":"Microsoft Office Word type confusion local code execution","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:15.35+00:00","url":"https://junglewise.ai/threats/cve-2026-40364-microsoft-office-word-type-confusion-local-code-execution"},{"cve":"CVE-2026-40361","cvss":8.4,"epss":0.0008,"slug":"cve-2026-40361-microsoft-office-word-use-after-free-code-execution","title":"Microsoft Office Word use after free code execution","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:14.95+00:00","url":"https://junglewise.ai/threats/cve-2026-40361-microsoft-office-word-use-after-free-code-execution"},{"cve":"CVE-2026-35440","cvss":5.5,"epss":0.0004,"slug":"cve-2026-35440-microsoft-office-word-information-disclosure-via-unauthorized","title":"Microsoft Office Word information disclosure via unauthorized file access","severity":"medium","exploited":false,"published_at":"2026-05-12T18:17:14.287+00:00","url":"https://junglewise.ai/threats/cve-2026-35440-microsoft-office-word-information-disclosure-via-unauthorized"},{"cve":"CVE-2026-21514","cvss":7.8,"epss":0.0448,"slug":"cve-2026-21514-microsoft-office-word-reliance-on-untrusted-inputs-in-security","title":"Microsoft Office Word reliance on untrusted inputs in security decision","severity":"critical","exploited":true,"published_at":"2026-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21514-microsoft-office-word-reliance-on-untrusted-inputs-in-security"},{"cve":"CVE-2023-36761","cvss":6.5,"slug":"cve-2023-36761-microsoft-word-information-disclosure-vulnerability","title":"Microsoft Word Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36761-microsoft-word-information-disclosure-vulnerability"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":9},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Microsoft Windows","slug":"windows-","vulnerabilities":963,"url":"https://junglewise.ai/threats/technologies/windows-"},{"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":588,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":493,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vulnerabilities":293,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vulnerabilities":213,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vulnerabilities":211,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":192,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"name":"Microsoft Windows Server 2022","slug":"windows-server-2022","vulnerabilities":178,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"name":"Microsoft Edge","slug":"edge-chromium-based","vulnerabilities":167,"url":"https://junglewise.ai/threats/technologies/edge-chromium-based"},{"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"name":"Microsoft Windows 11 Version 26H1","slug":"windows-11-version-26h1","vulnerabilities":135,"url":"https://junglewise.ai/threats/technologies/windows-11-version-26h1"},{"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vulnerabilities":124,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"}],"technology":{"hub":true,"name":"Microsoft Word","slug":"word","vendor":{"name":"Microsoft","slug":"microsoft","url":"https://junglewise.ai/threats/vendors/microsoft"},"aliases":["word-2016"],"category":"application","homepage":"https://www.microsoft.com/en-us/microsoft-365/word","description":"A word processor developed by Microsoft for creating and editing documents.","url":"https://junglewise.ai/threats/technologies/word"},"most_severe":[{"cve":"CVE-2012-2539","cvss":9.3,"slug":"cve-2012-2539-microsoft-word-remote-code-execution-vulnerability","title":"Microsoft Word Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2012-2539-microsoft-word-remote-code-execution-vulnerability"},{"cve":"CVE-2014-1761","cvss":9.3,"slug":"cve-2014-1761-microsoft-word-memory-corruption-vulnerability","title":"Microsoft Word Memory Corruption Vulnerability","severity":"critical","exploited":true,"published_at":"2022-02-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2014-1761-microsoft-word-memory-corruption-vulnerability"},{"cve":"CVE-2006-2492","cvss":8.8,"slug":"cve-2006-2492-microsoft-word-malformed-object-pointer-vulnerability","title":"Microsoft Word Malformed Object Pointer Vulnerability","severity":"critical","exploited":true,"published_at":"2022-06-08T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2006-2492-microsoft-word-malformed-object-pointer-vulnerability"},{"cve":"CVE-2026-21514","cvss":7.8,"epss":0.0448,"slug":"cve-2026-21514-microsoft-office-word-reliance-on-untrusted-inputs-in-security","title":"Microsoft Office Word reliance on untrusted inputs in security decision","severity":"critical","exploited":true,"published_at":"2026-02-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21514-microsoft-office-word-reliance-on-untrusted-inputs-in-security"},{"cve":"CVE-2017-11826","cvss":7.8,"slug":"cve-2017-11826-microsoft-office-remote-code-execution-vulnerability","title":"Microsoft Office Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-11826-microsoft-office-remote-code-execution-vulnerability"},{"cve":"CVE-2023-36761","cvss":6.5,"slug":"cve-2023-36761-microsoft-word-information-disclosure-vulnerability","title":"Microsoft Word Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2023-09-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-36761-microsoft-word-information-disclosure-vulnerability"},{"cve":"CVE-2026-78511","cvss":8.8,"epss":0.0082,"slug":"cve-2026-78511-microsoft-word-heap-based-buffer-overflow","title":"Microsoft Word heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:20:46.327+00:00","url":"https://junglewise.ai/threats/cve-2026-78511-microsoft-word-heap-based-buffer-overflow"},{"cve":"CVE-2026-69764","cvss":8.8,"epss":0.0082,"slug":"cve-2026-69764-microsoft-office-word-heap-based-buffer-overflow","title":"Microsoft Office Word heap-based buffer overflow","severity":"high","exploited":false,"published_at":"2026-09-08T18:19:47.713+00:00","url":"https://junglewise.ai/threats/cve-2026-69764-microsoft-office-word-heap-based-buffer-overflow"},{"cve":"CVE-2026-40364","cvss":8.4,"epss":0.0019,"slug":"cve-2026-40364-microsoft-office-word-type-confusion-local-code-execution","title":"Microsoft Office Word type confusion local code execution","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:15.35+00:00","url":"https://junglewise.ai/threats/cve-2026-40364-microsoft-office-word-type-confusion-local-code-execution"},{"cve":"CVE-2026-40361","cvss":8.4,"epss":0.0008,"slug":"cve-2026-40361-microsoft-office-word-use-after-free-code-execution","title":"Microsoft Office Word use after free code execution","severity":"high","exploited":false,"published_at":"2026-05-12T18:17:14.95+00:00","url":"https://junglewise.ai/threats/cve-2026-40361-microsoft-office-word-use-after-free-code-execution"}],"generated_at":"2026-09-26T09:24:00.138874+00:00"}