Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › End-user applications

End-user applications

Office, PDF and utilities

Office suites, PDF readers, archivers and utilities installed on workstations.

For example: Microsoft Office, Adobe Acrobat, WinRAR, 7-Zip.

Category RSS feed

Pace of additions

Number of “Office and PDF” vulnerabilities added to CISA’s KEV catalog, per 30-day period (the last one, still in progress, ends on September 28, 2026). Source: CISA KEV catalog.
Catalog additions per 30-day period
PeriodVulnerabilities added
Sep 4, 2025 to Oct 3, 20250
Oct 4, 2025 to Nov 2, 20250
Nov 3, 2025 to Dec 2, 20250
Dec 3, 2025 to Jan 1, 20261
Jan 2, 2026 to Jan 31, 20262
Feb 1, 2026 to Mar 2, 20262
Mar 3, 2026 to Apr 1, 20260
Apr 2, 2026 to May 1, 20265
May 2, 2026 to May 31, 20262
Jun 1, 2026 to Jun 30, 20260
Jul 1, 2026 to Jul 30, 20260
Jul 31, 2026 to Aug 29, 20260
Aug 30, 2026 to Sep 28, 2026 (in progress)2

Affected brands

In alphabetical order, with their number of vulnerabilities in this category.

  • 7-Zip 1 vulnerability
  • Adobe 23 vulnerabilities · 3 in the last 12 months
  • DAEMON Tools 1 vulnerability · 1 in the last 12 months
  • Kingsoft 1 vulnerability
  • Microsoft 44 vulnerabilities · 5 in the last 12 months
  • Notepad++ 1 vulnerability · 1 in the last 12 months
  • PaperCut 5 vulnerabilities · 3 in the last 12 months
  • RARLAB 5 vulnerabilities · 1 in the last 12 months

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

See also

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this category.

  1. Rank 1PaperCut NG / MF

    CVE-2026-81578

    Recently added

    PaperCut NG/MF Missing Authentication for Critical Function Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Aug 31, 2026
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  2. Rank 2PaperCut NG / MF

    CVE-2026-82078

    Recently added

    PaperCut NG/MF Unsafe Reflection Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Aug 31, 2026
    CISA deadline
    14 days
    CVSS severity
    9.1 (critical)

  3. Rank 3DAEMON Tools Lite

    CVE-2026-8398

    Daemon Tools Lite Embedded Malicious Code Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    May 27, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)

  4. Rank 4Adobe Acrobat / Reader

    CVE-2009-3459

    CVE from 2009, added in 2026

    Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    May 20, 2026
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  5. Rank 5Microsoft Office

    CVE-2009-0238

    CVE from 2009, added in 2026

    Microsoft Office Remote Code Execution

    Added in the last 12 months: ranked by severity.

    Added
    Apr 14, 2026
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  6. Rank 6Microsoft Office

    CVE-2009-0556

    CVE from 2009, added in 2026

    Microsoft Office PowerPoint Code Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 7, 2026
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  7. Rank 7Adobe Acrobat / Reader

    CVE-2026-34621

    Adobe Acrobat and Reader Prototype Pollution Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Apr 13, 2026
    CISA deadline
    14 days
    CVSS severity
    8.6 (high)

  8. Rank 8Microsoft Office

    CVE-2012-1854

    CVE from 2012, added in 2026

    Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Apr 13, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  9. Rank 9Adobe Acrobat / Reader

    CVE-2020-9715

    CVE from 2020, added in 2026

    Adobe Acrobat Use-After-Free Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Apr 13, 2026
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  10. Rank 10Microsoft Office

    CVE-2026-21514

    Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 10, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)
Show 71 more vulnerabilities

  1. Rank 11Microsoft Office

    CVE-2026-21509

    Microsoft Office Security Feature Bypass Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jan 26, 2026
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  2. Rank 12RARLAB WinRAR

    CVE-2025-6218

    RARLAB WinRAR Path Traversal Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Dec 9, 2025
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  3. Rank 13PaperCut NG / MF

    CVE-2023-27351

    RansomwareCVE from 2023, added in 2026

    PaperCut NG/MF Improper Authentication Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Apr 20, 2026
    CISA deadline
    14 days
    CVSS severity
    7.5 (high)

  4. Rank 14Notepad++

    CVE-2025-15556

    Notepad++ Download of Code Without Integrity Check Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Feb 12, 2026
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  5. Rank 15PaperCut NG / MF

    CVE-2023-27350

    Ransomware

    PaperCut MF/NG Improper Access Control Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Apr 21, 2023
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  6. Rank 16Microsoft Office

    CVE-2023-23397

    Microsoft Office Outlook Privilege Escalation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 14, 2023
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  7. Rank 17Adobe Acrobat / Reader

    CVE-2011-2462

    CVE from 2011, added in 2022

    Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)

  8. Rank 18Adobe Acrobat / Reader

    CVE-2014-0546

    CVE from 2014, added in 2022

    Adobe Reader and Acrobat Sandbox Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  9. Rank 19Adobe Acrobat / Reader

    CVE-2013-2729

    CVE from 2013, added in 2022

    Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  10. Rank 20Adobe Acrobat / Reader

    CVE-2013-3346

    CVE from 2013, added in 2022

    Adobe Reader and Acrobat Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  11. Rank 21Microsoft Office

    CVE-2007-0671

    CVE from 2007, added in 2025

    Microsoft Office Excel Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 12, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  12. Rank 22RARLAB WinRAR

    CVE-2025-8088

    Ransomware

    RARLAB WinRAR Path Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 12, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  13. Rank 23PaperCut NG / MF

    CVE-2023-2533

    CVE from 2023, added in 2025

    PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jul 28, 2025
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  14. Rank 24Microsoft Office

    CVE-2024-38189

    Microsoft Project Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 13, 2024
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  15. Rank 25Microsoft Office

    CVE-2006-2492

    CVE from 2006, added in 2022

    Microsoft Word Malformed Object Pointer Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  16. Rank 26Adobe Acrobat / Reader

    CVE-2008-0655

    CVE from 2008, added in 2022

    Adobe Acrobat and Reader Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  17. Rank 27Adobe Acrobat / Reader

    CVE-2009-3953

    CVE from 2009, added in 2022

    Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  18. Rank 28Adobe Acrobat / Reader

    CVE-2018-4990

    CVE from 2018, added in 2022

    Adobe Acrobat and Reader Double Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  19. Rank 29Microsoft Office

    CVE-2015-1770

    CVE from 2015, added in 2022

    Microsoft Office Uninitialized Memory Use Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  20. Rank 30Adobe Acrobat / Reader

    CVE-2009-0927

    CVE from 2009, added in 2022

    Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 25, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  21. Rank 31Microsoft Office

    CVE-2012-1856

    CVE from 2012, added in 2022

    Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  22. Rank 32Adobe Acrobat / Reader

    CVE-2014-0496

    CVE from 2014, added in 2022

    Adobe Reader and Acrobat Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  23. Rank 33Microsoft Office

    CVE-2015-2424

    CVE from 2015, added in 2022

    Microsoft PowerPoint Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    8.8 (high)

  24. Rank 34Microsoft Office

    CVE-2019-1297

    CVE from 2019, added in 2022

    Microsoft Excel Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  25. Rank 35Microsoft Office

    CVE-2012-0158

    RansomwareCVE from 2012, added in 2021

    Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  26. Rank 36Microsoft Office

    CVE-2018-0798

    CVE from 2018, added in 2021

    Microsoft Office Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    8.8 (high)

  27. Rank 37Adobe Acrobat / Reader

    CVE-2021-21017

    Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  28. Rank 38Adobe Acrobat / Reader

    CVE-2021-28550

    Adobe Acrobat and Reader Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    8.8 (high)

  29. Rank 39Kingsoft WPS Office

    CVE-2024-7262

    Kingsoft WPS Office Path Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 3, 2024
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  30. Rank 40Adobe Acrobat / Reader

    CVE-2023-21608

    Adobe Acrobat and Reader Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 10, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  31. Rank 41Adobe Acrobat / Reader

    CVE-2023-26369

    Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 14, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  32. Rank 42RARLAB WinRAR

    CVE-2023-38831

    Ransomware

    RARLAB WinRAR Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 24, 2023
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  33. Rank 43Adobe Acrobat / Reader

    CVE-2007-5659

    CVE from 2007, added in 2022

    Adobe Acrobat and Reader Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  34. Rank 44Microsoft Office

    CVE-2009-0557

    CVE from 2009, added in 2022

    Microsoft Office Object Record Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  35. Rank 45Microsoft Office

    CVE-2009-0563

    CVE from 2009, added in 2022

    Microsoft Office Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  36. Rank 46Adobe Acrobat / Reader

    CVE-2009-4324

    CVE from 2009, added in 2022

    Adobe Acrobat and Reader Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  37. Rank 47Microsoft Office

    CVE-2010-2572

    CVE from 2010, added in 2022

    Microsoft PowerPoint Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  38. Rank 48Microsoft Office

    CVE-2013-1331

    CVE from 2013, added in 2022

    Microsoft Office Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  39. Rank 49Microsoft Office

    CVE-2012-2539

    CVE from 2012, added in 2022

    Microsoft Word Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  40. Rank 50Microsoft Office

    CVE-2021-38646

    Ransomware

    Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 28, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  41. Rank 51Adobe Acrobat / Reader

    CVE-2008-2992

    RansomwareCVE from 2008, added in 2022

    Adobe Reader and Acrobat Input Validation Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  42. Rank 52Microsoft Office

    CVE-2009-3129

    CVE from 2009, added in 2022

    Microsoft Excel Featheader Record Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  43. Rank 53Adobe Acrobat / Reader

    CVE-2010-0188

    RansomwareCVE from 2010, added in 2022

    Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  44. Rank 54Microsoft Office

    CVE-2010-3333

    CVE from 2010, added in 2022

    Microsoft Office Stack-based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  45. Rank 55Adobe Acrobat / Reader

    CVE-2013-0640

    CVE from 2013, added in 2022

    Adobe Reader and Acrobat Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  46. Rank 56Adobe Acrobat / Reader

    CVE-2013-0641

    CVE from 2013, added in 2022

    Adobe Reader Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  47. Rank 57Microsoft Office

    CVE-2015-1642

    CVE from 2015, added in 2022

    Microsoft Office Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  48. Rank 58Microsoft Office

    CVE-2015-2545

    CVE from 2015, added in 2022

    Microsoft Office Malformed EPS File Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  49. Rank 59Microsoft Office

    CVE-2016-7193

    CVE from 2016, added in 2022

    Microsoft Office Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  50. Rank 60Microsoft Office

    CVE-2016-7262

    CVE from 2016, added in 2022

    Microsoft Office Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  51. Rank 61Microsoft Office

    CVE-2017-0261

    CVE from 2017, added in 2022

    Microsoft Office Use-After-Free Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  52. Rank 62Microsoft Office

    CVE-2017-11826

    CVE from 2017, added in 2022

    Microsoft Office Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Mar 3, 2022
    CISA deadline
    21 days
    CVSS severity
    7.8 (high)

  53. Rank 63Microsoft Office

    CVE-2017-8570

    CVE from 2017, added in 2022

    Microsoft Office Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 25, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  54. Rank 64Microsoft Office

    CVE-2014-1761

    CVE from 2014, added in 2022

    Microsoft Word Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 15, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  55. Rank 65RARLAB WinRAR

    CVE-2018-20250

    RansomwareCVE from 2018, added in 2022

    WinRAR Absolute Path Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 15, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  56. Rank 66Microsoft Office

    CVE-2017-0262

    CVE from 2017, added in 2022

    Microsoft Office Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 10, 2022
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  57. Rank 67Microsoft Office

    CVE-2021-42292

    Microsoft Excel Security Feature Bypass

    Added more than a year ago: ranked by severity.

    Added
    Nov 17, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

  58. Rank 68Microsoft Office

    CVE-2015-1641

    CVE from 2015, added in 2021

    Microsoft Office Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  59. Rank 69Microsoft Office

    CVE-2016-3235

    CVE from 2016, added in 2021

    Microsoft Office OLE DLL Side Loading Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  60. Rank 70Microsoft Office

    CVE-2017-0199

    RansomwareCVE from 2017, added in 2021

    Microsoft Office and WordPad Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  61. Rank 71Microsoft Office

    CVE-2017-11774

    CVE from 2017, added in 2021

    Microsoft Office Outlook Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  62. Rank 72Microsoft Office

    CVE-2017-11882

    RansomwareCVE from 2017, added in 2021

    Microsoft Office Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  63. Rank 73Microsoft Office

    CVE-2018-0802

    RansomwareCVE from 2018, added in 2021

    Microsoft Office Memory Corruption Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    7.8 (high)

  64. Rank 74RARLAB UnRAR

    CVE-2022-30333

    Ransomware

    RARLAB UnRAR Directory Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Aug 9, 2022
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

  65. Rank 75Microsoft Office

    CVE-2024-38226

    Microsoft Publisher Protection Mechanism Failure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 10, 2024
    CISA deadline
    21 days
    CVSS severity
    7.3 (high)

  66. Rank 76Microsoft Office

    CVE-2023-21715

    Microsoft Office Publisher Security Feature Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 14, 2023
    CISA deadline
    21 days
    CVSS severity
    7.3 (high)

  67. Rank 77Adobe Acrobat / Reader

    CVE-2010-2883

    CVE from 2010, added in 2022

    Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    7.3 (high)

  68. Rank 787-Zip

    CVE-2025-0411

    7-Zip Mark of the Web Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 6, 2025
    CISA deadline
    21 days
    CVSS severity
    7.0 (high)

  69. Rank 79Microsoft Office

    CVE-2023-36761

    Microsoft Word Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Sep 12, 2023
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

  70. Rank 80Microsoft Office

    CVE-2021-27059

    Microsoft Office Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    6.5 (medium)

  71. Rank 81Microsoft WordPad

    CVE-2023-36563

    Microsoft WordPad Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Oct 10, 2023
    CISA deadline
    21 days
    CVSS severity
    5.5 (medium)

Filed under another category

This vulnerability also concerns this type of product, but is counted in its main category. My radar finds it when you follow this category.

  1. Adobe Flash Player

    CVE-2009-1862

    CVE from 2009, added in 2022

    Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Jun 8, 2022
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

Follow and verify

Get new vulnerabilities in this category: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.