CyberSIXT Search
Microsoft product

Office

← All Microsoft products

No CISA KEV deadline is open. CISA last added a Office CVE on 14 Apr.

Tracked since 26 Jan · latest article Tue 20 Oct · RSS

High exploit odds · current
0
high · not in KEV

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2009-0238Office14 AprDeadline passed 28 AprRansomware: Unknown · 3 articles
CVE-2026-21514Office10 FebDeadline passed 3 MarRansomware: Unknown · 9 articles
CVE-2026-21509Office26 JanDeadline passed 16 FebRansomware: Unknown · 22 articles
CVE-2009-0556not in CyberSIXT coverageOffice7 JanDeadline passed 28 JanRansomware: Unknown · 0 articles
CVE-2007-0671not in CyberSIXT coverageOffice12 Aug 2025Deadline passed 2 Sep 2025Ransomware: Unknown · 0 articles
CVE-2023-23397not in CyberSIXT coverageOffice14 Mar 2023Deadline passed 4 Apr 2023Ransomware: Unknown · 0 articles
CVE-2023-21715not in CyberSIXT coverageOffice14 Feb 2023Deadline passed 7 Mar 2023Ransomware: Unknown · 0 articles
CVE-2009-0557not in CyberSIXT coverageOffice8 Jun 2022Deadline passed 22 Jun 2022Ransomware: Unknown · 0 articles
CVE-2009-0563not in CyberSIXT coverageOffice8 Jun 2022Deadline passed 22 Jun 2022Ransomware: Unknown · 0 articles
CVE-2013-1331not in CyberSIXT coverageOffice8 Jun 2022Deadline passed 22 Jun 2022Ransomware: Unknown · 0 articles
20 earlier entries
CVE-2015-1770not in CyberSIXT coverageOffice28 Mar 2022Deadline passed 18 Apr 2022Ransomware: Unknown · 0 articles
CVE-2021-38646not in CyberSIXT coverageOffice28 Mar 2022Deadline passed 18 Apr 2022Ransomware: Known · 0 articles
CVE-2010-3333not in CyberSIXT coverageOffice3 Mar 2022Deadline passed 24 Mar 2022Ransomware: Unknown · 0 articles
CVE-2012-1856not in CyberSIXT coverageOffice3 Mar 2022Deadline passed 24 Mar 2022Ransomware: Unknown · 0 articles
CVE-2015-1642not in CyberSIXT coverageOffice3 Mar 2022Deadline passed 24 Mar 2022Ransomware: Unknown · 0 articles
CVE-2015-2545not in CyberSIXT coverageOffice3 Mar 2022Deadline passed 24 Mar 2022Ransomware: Unknown · 0 articles
CVE-2016-7193not in CyberSIXT coverageOffice3 Mar 2022Deadline passed 24 Mar 2022Ransomware: Unknown · 0 articles
CVE-2017-0261not in CyberSIXT coverageOffice3 Mar 2022Deadline passed 24 Mar 2022Ransomware: Unknown · 0 articles
CVE-2017-11826not in CyberSIXT coverageOffice3 Mar 2022Deadline passed 24 Mar 2022Ransomware: Unknown · 0 articles
CVE-2017-8570not in CyberSIXT coverageOffice25 Feb 2022Deadline passed 25 Aug 2022Ransomware: Unknown · 0 articles
CVE-2017-0262not in CyberSIXT coverageOffice10 Feb 2022Deadline passed 10 Aug 2022Ransomware: Unknown · 0 articles
CVE-2021-42292not in CyberSIXT coverageOffice17 Nov 2021Deadline passed 1 Dec 2021Ransomware: Unknown · 0 articles
CVE-2021-27059not in CyberSIXT coverageOffice3 Nov 2021Deadline passed 17 Nov 2021Ransomware: Unknown · 0 articles
CVE-2015-1641not in CyberSIXT coverageOffice3 Nov 2021Deadline passed 3 May 2022Ransomware: Unknown · 0 articles
CVE-2016-3235not in CyberSIXT coverageOffice3 Nov 2021Deadline passed 3 May 2022Ransomware: Unknown · 0 articles
CVE-2017-0199not in CyberSIXT coverageOffice and WordPad3 Nov 2021Deadline passed 3 May 2022Ransomware: Known · 0 articles
CVE-2017-11774not in CyberSIXT coverageOffice3 Nov 2021Deadline passed 3 May 2022Ransomware: Unknown · 0 articles
CVE-2017-11882not in CyberSIXT coverageOffice3 Nov 2021Deadline passed 3 May 2022Ransomware: Known · 0 articles
CVE-2018-0798not in CyberSIXT coverageOffice3 Nov 2021Deadline passed 3 May 2022Ransomware: Unknown · 0 articles
CVE-2018-0802Office3 Nov 2021Deadline passed 3 May 2022Ransomware: Known · 1 article

Coverage

34 articles · all timeFull timeline →

34 articles from 12 outlets since 26 Jan; 1 in the last 7 days.

Office: coverage over time34 articles from 12 outlets. First report 26 Jan by Security Affairs. Busiest week: 10 articles, week of 9 Feb. 1 in the last 7 days. Office: coverage over time34 articles from 12 outlets. First report 26 Jan by Security Affairs. Busiest week: 10 articles, week of 9 Feb. 1 in the last 7 days.
  • Article
  • First report
  • Official notice
Show as table
Office: articles
Published (UTC)OutletHeadline
Tue 20 Oct · 12:31 UTCThe Hacker NewsAPT28 Breaches NATO Naval Shipbuilder and Steals Credentials in Week-Long Intrusion
Thu 7 May · 10:11 UTCSecurelistOffice and Windows flaws boost exploit kits in Q1 2026
Wed 15 Apr · 15:06 UTCSecurity AffairsCISA adds old Excel RCE and SharePoint flaw to KEV list
Tue 14 Apr · 23:08 UTCCISACISA Adds CVE-2009-0238 Excel Flaw to KEV Catalog, Urges Patching
Tue 14 Apr · 21:24 UTCCISACISA Flags 2009 Excel Flaw CVE‑2009‑0238 as Actively Exploited
Wed 8 Apr · 21:11 UTCSecurity AffairsRussia-linked APT28 uses PRISMEX to infiltrate Ukraine and allied infrastructure with advanced tactics
Wed 8 Apr · 16:11 UTCThe Hacker NewsAPT28 Deploys New PRISMEX Malware Against Ukraine and NATO Allies
Thu 26 Mar · 03:45 UTCtrendmicro.comPawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entities
Mon 2 Mar · 11:39 UTCThe Hacker NewsMSHTML CVE-2026-21513 exploited by APT28; patch issued
Thu 12 Feb · 01:45 UTCSecurityOnlineExcel Trap: New Phishing Campaign Deploys Fileless XWorm RAT
Wed 11 Feb · 14:20 UTCSOCRadarFebruary 2026 Patch Tuesday: Six Active Zero-Days & 53 Other Flaws Addressed
Wed 11 Feb · 12:40 UTCMalwarebytesFebruary 2026 Patch Tuesday includes six actively exploited zero-days
Wed 11 Feb · 08:25 UTCSecurity AffairsU.S. CISA adds Microsoft Office and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog
Wed 11 Feb · 04:35 UTCSecurityOnlinePatch Panic: Microsoft Fixes 6 Active Zero-Days in Feb 2026 Update
Tue 10 Feb · 23:35 UTCSecurity AffairsMicrosoft Patch Tuesday security updates for February 2026 fix six actively exploited zero-days
Tue 10 Feb · 22:30 UTCKrebs on SecurityPatch Tuesday, February 2026 Edition
Tue 10 Feb · 21:55 UTCDark ReadingMicrosoft Patches 6 Actively Exploited Zero-Days
Tue 10 Feb · 19:40 UTCSecurityWeek6 Actively Exploited Zero-Days Patched by Microsoft With February 2026 Updates
Mon 9 Feb · 00:40 UTCSecurityOnlineAPT28 Weaponizes Office Flaw to Spy on NATO & Military
Sun 8 Feb · 14:25 UTCSecurity AffairsSECURITY AFFAIRS MALWARE NEWSLETTER ROUND 83
Wed 4 Feb · 23:35 UTCArs TechnicaRussian-state hackers exploit Office vulnerability to infect computers
Tue 3 Feb · 22:50 UTCDark ReadingRussian Hackers Weaponize Microsoft Office Bug in Just 3 Days
Tue 3 Feb · 12:45 UTCSecurity AffairsAPT28 exploits Microsoft Office flaw in Operation Neusploit
Tue 3 Feb · 11:40 UTCSOCRadarCVE-2026-21509: APT28 Actively Exploits Microsoft Office Vulnerability in Ukraine
Tue 3 Feb · 11:40 UTCSecurityWeekRussia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability
Tue 3 Feb · 10:00 UTCThe Hacker NewsAPT28 Uses Microsoft Office CVE-2026-21509 in Espionage-Focused Malware Attacks
Tue 3 Feb · 03:15 UTCSecurityOnlineFancy Bear Returns: APT28 Exploits Office Flaw in “Operation Neusploit”
Thu 29 Jan · 15:26 UTCMalwarebytesMicrosoft Office zero-day lets malicious documents slip past security checks
Tue 27 Jan · 22:15 UTCDark ReadingMicrosoft Rushes Emergency Patch for Office Zero-Day
Tue 27 Jan · 15:40 UTCSecurity AffairsU.S. CISA adds Microsoft Office, GNU InetUtils, SmarterTools SmarterMail, and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
Tue 27 Jan · 09:05 UTCSecurityWeekMicrosoft Patches Office Zero-Day Likely Exploited in Targeted Attacks
Tue 27 Jan · 09:05 UTCThe Hacker NewsMicrosoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation
Tue 27 Jan · 03:00 UTCSecurityOnlineUnder Attack: Microsoft Patches Office Zero-Day (CVE-2026-21509) Exploited in the Wild
Mon 26 Jan · 19:26 UTCSecurity AffairsEmergency Microsoft update fixes in-the-wild Office zero-day

Who reported 12 outlets, last 12 months

  • Security Affairs8
  • SecurityOnline5
  • The Hacker News5
  • Dark Reading3
  • SecurityWeek3
  • Malwarebytes2
  • Others8
See the full timeline
  1. APT28 Breaches NATO Naval Shipbuilder and Steals Credentials in Week-Long IntrusionThe Hacker News
  2. Office and Windows flaws boost exploit kits in Q1 2026Securelist
  3. CISA adds old Excel RCE and SharePoint flaw to KEV listSecurity Affairs
  4. CISA Adds CVE-2009-0238 Excel Flaw to KEV Catalog, Urges PatchingCISA · official notice
  5. CISA Flags 2009 Excel Flaw CVE‑2009‑0238 as Actively ExploitedCISA · official notice
  6. Russia-linked APT28 uses PRISMEX to infiltrate Ukraine and allied infrastructure with advanced tacticsSecurity Affairs
  7. APT28 Deploys New PRISMEX Malware Against Ukraine and NATO AlliesThe Hacker News
  8. Pawn Storm Campaign Deploys PRISMEX, Targets Government and Critical Infrastructure Entitiestrendmicro.com
  9. MSHTML CVE-2026-21513 exploited by APT28; patch issuedThe Hacker News
  10. Excel Trap: New Phishing Campaign Deploys Fileless XWorm RATSecurityOnline

All CVEs in coverage

4
CVE-2018-0802Microsoft Office Memory Corruption VulnerabilityCVSSUnratedExploited93%EPSS1article
CVE-2026-21509Microsoft Office Security Feature Bypass VulnerabilityCVSS7.8HighExploited71%EPSS22articles
CVE-2009-0238Microsoft Office Remote Code ExecutionCVSS8.8HighExploited43%EPSS3articles
CVE-2026-21514Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision VulnerabilityCVSS7.8HighExploited1.6%EPSS9articles
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device