Office Long Term Servicing Channel
by Microsoft
Standard maintenance is sufficient
Office Long Term Servicing Channel has low exploitation rates. Attackers rarely target this software's known vulnerabilities.
What to do
- Keep automatic updates enabled
- No urgent action needed
- Review periodically as part of normal maintenance
What Attackers Target
Vulnerabilities with high exploit probability
5.2%
Confirmed actively exploited (CISA)
3.1%
Public exploit code available
0.0%
Based on 288 known vulnerabilities. Percentages show the proportion that are actively dangerous — a low percentage means most vulnerabilities in this product are not being exploited.
Most Dangerous Vulnerabilities
| CVE | CVSS | Exploit Probability | Confirmed |
|---|---|---|---|
| CVE-2023-23397 | 9.8 | 93.4% | Yes |
| CVE-2024-21413 | 9.8 | 93.0% | Yes |
| CVE-2023-21716 | 9.8 | 91.4% | — |
| CVE-2024-38200 | 6.5 | 55.7% | — |
| CVE-2024-38189 | 8.8 | 43.7% | Yes |
| CVE-2023-32029 | 7.8 | 40.3% | — |
| CVE-2023-33133 | 7.8 | 37.2% | — |
| CVE-2021-42292 | 7.8 | 35.5% | Yes |
| CVE-2024-21378 | 8.8 | 20.1% | — |
| CVE-2024-43504 | 7.8 | 12.9% | — |
| CVE-2022-44713 | 7.5 | 11.2% | — |
| CVE-2022-38001 | 6.5 | 11.1% | — |
| CVE-2024-43609 | 6.5 | 10.5% | — |
| CVE-2023-35636 | 6.5 | 10.5% | — |
| CVE-2022-34717 | 8.8 | 10.4% | — |
| CVE-2024-38021 | 8.8 | 8.6% | — |
| CVE-2022-38049 | 7.8 | 7.9% | — |
| CVE-2022-41031 | 7.8 | 7.9% | — |
| CVE-2026-21509 | 7.8 | 7.5% | Yes |
| CVE-2023-36761 | 6.5 | 7.3% | Yes |
8
/ 100
low-risk
Active Threat
6/50 · Minimal
Exploit Availability
2/50 · Minimal
Score uses Wilson score intervals to account for sample size. Products with few CVEs are scored conservatively.