Microsoft Office for Universal

productDE

cpe:/a:microsoft:office:for_universal

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical12high2medium0low

updated 2026-10-27

vulnerabilities (109)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-21823US	—OT critical	5.56% (93rd)	KEV	no fix	2023-02-14	—
CVE-2023-41763US	—OT critical	90.5% (100th)	KEV	no fix	2023-10-10	—
CVE-2023-21715US	high7.3OT critical	12.0% (96th)	KEV	no fix	2023-02-14	—
CVE-2024-38226US	—OT critical	2.67% (86th)	KEV	no fix	2024-09-10	—
CVE-2023-21716US	critical9.8	84.8% (100th)	Exploit	no fix	2023-02-14	—
CVE-2025-27751US	—	2.48% (84th)	Exploit	no fix	2025-04-08	—
CVE-2023-33148US	—	2.06% (81st)	Exploit	no fix	2023-07-11	—
CVE-2025-53783US	—	0.81% (57th)	Exploit	no fix	2025-08-12	—
CVE-2024-38018US	—	51.2% (99th)	—	no fix	2024-09-10	—
CVE-2024-43464US	—	36.3% (98th)	—	no fix	2024-09-10	—
CVE-2025-29793US	—	23.6% (98th)	—	no fix	2025-04-08	—
CVE-2025-49712US	—	20.7% (98th)	—	no fix	2025-08-12	—
CVE-2025-53760US	—	18.9% (97th)	—	no fix	2025-08-12	—
CVE-2024-38227US	—	8.16% (95th)	—	no fix	2024-09-10	—
CVE-2025-29794US	—	4.76% (92nd)	—	no fix	2025-04-08	—
CVE-2024-43466US	high7.5	4.50% (91st)	—	no fix	2024-09-10	—
CVE-2024-38228US	—	4.18% (91st)	—	no fix	2024-09-10	—
CVE-2023-33151US	—	3.40% (89th)	—	no fix	2023-07-11	—
CVE-2023-36780US	—	2.68% (86th)	—	no fix	2023-10-10	—
CVE-2025-30382US	—	2.61% (85th)	—	no fix	2025-05-13	—
CVE-2023-36786US	—	2.57% (85th)	—	no fix	2023-10-10	—
CVE-2023-36789US	—	2.54% (85th)	—	no fix	2023-10-10	—
CVE-2023-33150US	—	2.15% (82nd)	—	no fix	2023-07-11	—
CVE-2025-21348US	—	1.83% (79th)	—	no fix	2025-01-14	—
CVE-2025-21364US	—	1.67% (77th)	—	no fix	2025-01-14	—
CVE-2025-30378US	—	1.42% (73rd)	—	no fix	2025-05-13	—
CVE-2025-30384US	high7.0	1.39% (72nd)	—	no fix	2025-05-13	—
CVE-2023-33159US	—	1.30% (70th)	—	no fix	2023-07-11	—
CVE-2025-27744US	—	1.20% (68th)	—	no fix	2025-04-08	—
CVE-2025-21186US	—	1.19% (68th)	—	no fix	2025-01-14	—
CVE-2025-21366US	—	1.15% (67th)	—	no fix	2025-01-14	—
CVE-2025-26687US	—	1.14% (66th)	—	no fix	2025-04-08	—
CVE-2025-29792US	—	1.14% (66th)	—	no fix	2025-04-08	—
CVE-2023-33165US	high7.5	1.13% (66th)	—	no fix	2023-07-11	—
CVE-2024-43482US	—	1.10% (65th)	—	no fix	2024-09-10	—
CVE-2023-21717US	—	1.09% (65th)	—	no fix	2023-02-14	—
CVE-2025-27749US	—	1.08% (65th)	—	no fix	2025-04-08	—
CVE-2025-27748US	—	1.08% (65th)	—	no fix	2025-04-08	—
CVE-2025-27745US	—	1.08% (65th)	—	no fix	2025-04-08	—
CVE-2025-29801US	—OT elevated	1.06% (64th)	—	no fix	2025-04-08	—
CVE-2025-29800US	—	1.06% (64th)	—	no fix	2025-04-08	—
CVE-2025-21395US	—	1.06% (64th)	—	no fix	2025-01-14	—
CVE-2025-21393US	medium6.3	1.06% (64th)	—	no fix	2025-01-14	—
CVE-2025-29791US	—	1.04% (64th)	—	no fix	2025-04-08	—
CVE-2025-27752US	—	1.04% (64th)	—	no fix	2025-04-08	—
CVE-2023-33153US	high8.8	1.01% (63rd)	—	no fix	2023-07-11	—
CVE-2025-21365US	—	0.98% (62nd)	—	no fix	2025-01-14	—
CVE-2025-21354US	high7.8	0.95% (61st)	—	no fix	2025-01-14	—
CVE-2025-21362US	—	0.94% (61st)	—	no fix	2025-01-14	—
CVE-2024-43463US	high7.8	0.94% (61st)	—	no fix	2024-09-10	—

showing 50 of 109

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free31 CVEs
CWE-122Heap-based Buffer Overflow11 CVEs
CWE-502Deserialization of Untrusted Data9 CVEs
CWE-125Out-of-bounds Read7 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')5 CVEs
CWE-269Improper Privilege Management4 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)109 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan