Windows winget
Microsoft Office
winget:Microsoft.Office
Microsoft Office on Windows: 932 CVEs referenced, current version unknown, status indeterminable.
- Known vulnerabilities
- 932
- Still open
- 0
- KEV open
- 0
- Max CVSS (open)
- -
current version unknown
16 total (history)
9.8 historical
Known vulnerabilities (CVE)
Latest matched CVE: 2026
The app's current version is unknown : impossible to determine whether each vulnerability is still present. Will be resolved at the next enrichment.
Test a different version
Undeterminable status for this version
All 200 referenced CVEs have an indeterminable status for this app (unknown current version or incompatible version schemes), no reliable verdict is possible, so we assert nothing. Show
200 indeterminable CVE(s) hidden (missing current version or incompatible version schemes). · Show
Cumulative exposure
Low
Weighted sum capped at 100: open CVEs (max 50 pts) + KEV (max 35) + critical shared permissions (max 10) + trackers (max 8) + OS EOL (max 5). Higher score = more exposed.
-
Open CVEs +0/+50
0 open CVEs, max CVSS 0.0, EPSS 0%
-
Active KEVs +0/+35
0 CISA KEVs still open
-
Permissions +0/+10
0 critical shared permission(s)
-
Trackers +0/+8
0 identification/profiling tracker(s)
-
EOL OS +0/+5
Installed OS is end-of-life
Red dots: months with at least one actively exploited (KEV) CVE.
- Open 0 0%
- Unknown 172 100%
- Fixed 0 0%
FAQ
FAQ: Microsoft Office
Does Microsoft Office have known security vulnerabilities?
Microsoft Office (winget:Microsoft.Office) on Windows has 932 CVE referenced in NVD, 0 still open on the current version and 0 listed in the CISA KEV catalog. Absence of a CVE is not a security guarantee.
Is Microsoft Office affected by an actively exploited vulnerability (CISA KEV)?
No CVE affecting Microsoft Office (winget:Microsoft.Office) is currently in the CISA KEV catalog.