Microsoft
Microsoft Office 2019
Microsoft Office 2019
The Microsoft Office 2019 reached end of service life on Oct 14, 2025. Third-party maintenance keeps it supported — 24/7 engineering support and same-day replacement parts — at 40-70% below OEM renewal pricing.
End of Service LifeEOSL Date: Oct 14, 2025
Specifications
- product
- office
- release
- 2019
- product Label
- Microsoft Office
- release Label
- 2019
- codename
- lts
- latest Version
- release Date
- 2018-09-24
- maintained
- source Url
- https://endoflife.date/office
Lifecycle Dates
- End of Service Life
- Oct 14, 2025
- Last OEM Support
- Oct 10, 2023
OEM vs. 3rd Party Support
See how 3rd party maintenance compares to traditional OEM support for your Microsoft Office 2019. Get the same level of service at a fraction of the cost.
| Feature | OEM Support | 3rd Party Support |
|---|---|---|
| Post-EOSL Support | ||
| 24/7/365 Support | ||
| Same-Day Parts Replacement | Limited | |
| Mixed-Vendor Support | ||
| Flexible Contract Terms | Annual Only | Month-to-Month Available |
| Asset Lifecycle Extension | ||
| OEM-Trained Engineers |
Why Choose 3rd Party Support for Microsoft Office 2019?
Save 40-70%
Dramatically reduce your maintenance costs while maintaining the same level of support coverage.
Extend Asset Life
Continue using your Microsoft Office 2019 well beyond the OEM end-of-life date.
24/7 Expert Support
OEM-trained engineers available around the clock with same-day parts replacement.
Microsoft Office 2019 Support: Frequently Asked Questions
Is the Microsoft Office 2019 still supported?
Microsoft ended support for the Microsoft Office 2019 on Oct 14, 2025. Third-party maintenance remains available and keeps the Microsoft Office 2019 supported with 24/7 engineering support and same-day replacement parts.
When is the Microsoft Office 2019 end of service life (EOSL) date?
Microsoft lists the end of service life for the Microsoft Office 2019 as Oct 14, 2025.
Can I keep using the Microsoft Office 2019 after its EOSL date?
Yes. EOSL means Microsoft stops selling support contracts and issuing updates — the equipment itself keeps working. Third-party maintenance provides engineering support and replacement parts for as long as you choose to run it.
How much does third-party support for the Microsoft Office 2019 cost?
Typically 40-70% below the OEM maintenance renewal price. Exact pricing depends on quantity, service level and location — request a quote and we respond within 24 hours.
Known Vulnerabilities Affecting Microsoft Office 2019
519 published CVEs affect the Microsoft Office 2019, including 428 rated critical or high severity. Microsoft no longer ships security patches for this release — our engineers provide mitigation guidance, workarounds and hardening support.
| CVE | Severity | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-23397 | CRITICAL | 9.8 | Mar 14, 2023 | Microsoft Outlook Elevation of Privilege Vulnerability |
| CVE-2023-21716 | CRITICAL | 9.8 | Feb 14, 2023 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2020-0901 | CRITICAL | 9.8 | May 21, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users who |
| CVE-2019-1449 | CRITICAL | 9.8 | Nov 12, 2019 | A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would have to run a specially crafted file, aka 'Microsoft Office ClickToRun Security Feature Bypass Vulnerability'. |
| CVE-2019-1205 | CRITICAL | 9.8 | Aug 14, 2019 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then take actions on behalf of the logged-on user with the same permissions as the current user. To exploit the vulnerability, a user must open a specially crafted file with an affected version of Microsof |
| CVE-2023-33150 | CRITICAL | 9.6 | Jul 11, 2023 | Microsoft Office Security Feature Bypass Vulnerability |
| CVE-2019-1109 | CRITICAL | 9.1 | Jul 15, 2019 | A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the vulnerability by correcting the way that Microsoft Office Javascript verifies trusted web pages., aka 'Microsoft Office Spoofing Vulnerability'. |
| CVE-2007-0065 | HIGH | 10.0 | Feb 12, 2008 | Heap-based buffer overflow in Object Linking and Embedding (OLE) Automation in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, Office 2004 for Mac, and Visual basic 6.0 SP6 allows remote attackers to execute arbitrary code via a crafted script request. |
| CVE-2009-2496 | HIGH | 9.3 | Aug 12, 2009 | Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka "Office Web Components Heap Corruption |
| CVE-2009-1534 | HIGH | 9.3 | Aug 12, 2009 | Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka "Office Web Components Buffer Overflow Vulnerability." |
| CVE-2009-0562 | HIGH | 9.3 | Aug 12, 2009 | The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 SP1, and Office Small Business Accounting 2006 does not properly allocate memory, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger "system state" corruption, aka "Office We |
| CVE-2006-1311 | HIGH | 9.3 | Feb 13, 2007 | The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption. |
| CVE-2006-4694 | HIGH | 9.3 | Sep 27, 2006 | Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and Exploit-PPT.d/Trojan.PPDropper.F. NOTE: it has been reported that the attack vector involves SlideShowWindows.View.GotoNamedShow. |
| CVE-2006-1540 | HIGH | 9.3 | Mar 30, 2006 | MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a malformed string, as demonstrated by replacing a certain "01 00 00 00" byte sequence with an "FF FF FF FF" byte sequence, possibly causing an invalid array index, in (1) an Excel .xls document, which triggers an access violation in ole32.dll; (2) an |
| CVE-2026-40420 | HIGH | 8.8 | May 12, 2026 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. |
| CVE-2026-35436 | HIGH | 8.8 | May 12, 2026 | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. |
| CVE-2024-38021 | HIGH | 8.8 | Jul 9, 2024 | Microsoft Outlook Remote Code Execution Vulnerability |
| CVE-2024-30103 | HIGH | 8.8 | Jun 11, 2024 | Microsoft Outlook Remote Code Execution Vulnerability |
| CVE-2024-21378 | HIGH | 8.8 | Feb 13, 2024 | Microsoft Outlook Remote Code Execution Vulnerability |
| CVE-2023-35311 | HIGH | 8.8 | Jul 11, 2023 | Microsoft Outlook Security Feature Bypass Vulnerability |
Showing the 20 most severe of 519 known CVEs.
Get Third Party SupportRelated Microsoft Products
All Microsoft products →Microsoft Office 2019
Save 40-70% vs OEM