Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Microsoft
Microsoft Office Ltsc 2024

Microsoft Office LTSC 2024 Vulnerabilities: CVEs, CISA KEV & Security Advisories

216 CVEs

2 in CISA KEV

Microsoft Office LTSC 2024 Vulnerabilities

CVE security advisories and vulnerability history for Microsoft Office LTSC 2024 by Microsoft.

216

Total CVEs

Published

2

In CISA KEV

Exploited in the wild

7

Public exploits

With known exploit

7.7

Avg CVSS

2024–2026

Last updated May 12, 2026

Overview

Microsoft Office LTSC 2024 has 216 published CVE records since 2024, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Microsoft Office LTSC 2024, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include 32-bit Systems, x64-based Systems.

Severity and exploitation

How the CVSS severity of Microsoft Office LTSC 2024's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High202

Medium14

Low0

In CISA’s Known Exploited Vulnerabilities catalog

2

2 of Microsoft Office LTSC 2024's CVEs are confirmed exploited in the wild.

Public exploits

7

7 of Microsoft Office LTSC 2024's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Microsoft Office LTSC 2024 version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for Microsoft Office LTSC 2024; the CVEs below apply to the product without a version pin.

216 CVEs

Sort

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-40420
Patch
CWE-284
High · CVSS 8.8
EPSS 0.0% (14th pct)2026-05-12
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-35436
Patch
CWE-1220
High · CVSS 8.8
EPSS 0.0% (14th pct)2026-05-12
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-40418
Patch
CWE-416
High · CVSS 7.8
EPSS 0.0% (16th pct)2026-05-12
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-40367
Patch
CWE-822
High · CVSS 8.4
EPSS 0.1% (22th pct)2026-05-12
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-40362
Patch
CWE-122
High · CVSS 7.8
EPSS 0.1% (20th pct)2026-05-12
Microsoft Outlook and Word Remote Code Execution Vulnerability
CVE-2026-40361
Patch
CWE-416
High · CVSS 8.4
EPSS 0.1% (23th pct)2026-05-12
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-40359
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (20th pct)2026-05-12
Microsoft Office Remote Code Execution Vulnerability
CVE-2026-40358
Patch
CWE-416
High · CVSS 8.4
EPSS 0.1% (18th pct)2026-05-12
Microsoft Word Information Disclosure Vulnerability
CVE-2026-40421
Patch
CWE-73
Medium · CVSS 4.3
EPSS 0.1% (17th pct)2026-05-12
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-40419
Patch
CWE-416
High · CVSS 7.8
EPSS 0.0% (16th pct)2026-05-12
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-40366
Patch
CWE-416
High · CVSS 8.4
EPSS 0.1% (18th pct)2026-05-12
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-40364
Patch
CWE-843
High · CVSS 8.4
EPSS 0.2% (41th pct)2026-05-12
Microsoft Office Remote Code Execution Vulnerability
CVE-2026-40363
Patch
CWE-122
High · CVSS 8.4
EPSS 0.1% (18th pct)2026-05-12
Microsoft Excel Information Disclosure Vulnerability
CVE-2026-40360
Patch
CWE-125
High · CVSS 7.8
EPSS 0.1% (20th pct)2026-05-12
Microsoft Word Information Disclosure Vulnerability
CVE-2026-35440
Patch
CWE-552
Medium · CVSS 5.5
EPSS 0.0% (13th pct)2026-05-12
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-33115
Patch
CWE-416
High · CVSS 8.4
EPSS 0.1% (20th pct)2026-04-14
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-33114
Patch
CWE-822
High · CVSS 8.4
EPSS 0.1% (20th pct)2026-04-14
Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2026-32200
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-04-14
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-32199
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-04-14
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-32198
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-04-14
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-32197
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-04-14
Microsoft Office Remote Code Execution Vulnerability
CVE-2026-32190
Patch
CWE-416
High · CVSS 8.4
EPSS 0.1% (24th pct)2026-04-14
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-23657
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-04-14
Microsoft Word Remote Code Execution Vulnerability
CVE-2026-33095
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-04-14
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-32189
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-04-14
Microsoft Excel Information Disclosure Vulnerability
CVE-2026-32188
Patch
CWE-125
High · CVSS 7.1
EPSS 0.1% (19th pct)2026-04-14
Microsoft Office Remote Code Execution Vulnerability
CVE-2026-26110
Patch
CWE-843
High · CVSS 8.4
EPSS 0.1% (22th pct)2026-03-10
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-26109
Patch
CWE-125
High · CVSS 8.4
EPSS 0.0% (8th pct)2026-03-10
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-26108
Patch
CWE-122
High · CVSS 7.8
EPSS 0.0% (9th pct)2026-03-10
Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-26107
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (24th pct)2026-03-10

Showing 30 of 216

Common weakness types

The CWE weakness categories most often found in Microsoft Office LTSC 2024 CVEs. Follow any weakness for its full explanation.

CWE-416Use After Free101 CVEs
CWE-122Heap-based Buffer Overflow24 CVEs
CWE-125Out-of-bounds Read20 CVEs
CWE-822Untrusted Pointer Dereference18 CVEs
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')12 CVEs
CWE-126Buffer Over-read4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs

Disclosure activity by year

How many Microsoft Office LTSC 2024 CVEs were published each year.

2024

17

2025

151

2026

48

Other Microsoft products

Browse vulnerabilities for other products by Microsoft.

windows10,259 CVEs windows server 20165,207 CVEs windows server 20194,709 CVEs windows 104,437 CVEs windows server 20124,219 CVEs windows server 20084,083 CVEs Windows Server 2019 (Server Core installation)3,456 CVEs Windows 10 Version 18093,187 CVEs

All Microsoft vulnerabilities

Frequently asked questions

Common questions about Microsoft Office LTSC 2024 vulnerabilities.

How many CVEs does Microsoft Microsoft Office LTSC 2024 have?

Microsoft Microsoft Office LTSC 2024 has 216 published CVE records since 2024.

How many Microsoft Microsoft Office LTSC 2024 CVEs are in CISA KEV?

Yes — 2 of Microsoft Microsoft Office LTSC 2024's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Microsoft Microsoft Office LTSC 2024 vulnerabilities?

Yes — 7 of Microsoft Microsoft Office LTSC 2024's CVEs have a known public exploit.

What are the most common weakness types in Microsoft Microsoft Office LTSC 2024 CVEs?

Microsoft Microsoft Office LTSC 2024's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-122 (Heap-based Buffer Overflow), CWE-125 (Out-of-bounds Read), CWE-822 (Untrusted Pointer Dereference).

What is the average severity of Microsoft Microsoft Office LTSC 2024 CVEs?

The average CVSS base score across Microsoft Microsoft Office LTSC 2024's scored CVEs is 7.7.

References

All Microsoft vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Microsoft Office LTSC 2024 vulnerabilities

Monitor new Microsoft Office LTSC 2024 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References