Microsoft Microsoft Word for Android

9 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-4481216.0.0.0 – < 16.0.20131.20024Windows Graphics Component Remote Code Execution VulnerabilityHIGH 7.80.5 %
CVE-2026-4480316.0.0.0 – < 16.0.20131.20024Windows Graphics Component Remote Code Execution VulnerabilityHIGH 7.80.5 %
CVE-2026-4564916.0.0.0 – < 16.0.20131.20024Office for Android Spoofing VulnerabilityHIGH 7.10.4 %
CVE-2026-4283216.0.0.0 – < 16.0.19822.20190Microsoft Office Spoofing VulnerabilityHIGH 7.70.2 %
CVE-2026-4110116.0.0.0 – < 16.0.19822.20190Microsoft Word for Android Spoofing VulnerabilityHIGH 7.10.3 %
CVE-2026-41100Microsoft 365 Copilot for Android Spoofing VulnerabilityMEDIUM 4.40.2 %
CVE-2026-26133M365 Copilot Information Disclosure VulnerabilityHIGH 7.10.4 %
CVE-2022-26903Windows Graphics Component Remote Code Execution VulnerabilityHIGH 7.82.7 %
CVE-2020-1223unspecifiedA remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerabiHIGH 8.88.2 %