Lucene search

K

Office 365 Proplus Security Vulnerabilities

cve
cve

CVE-2020-0991

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from...

7.8CVSS

8.4AI Score

0.047EPSS

2020-04-15 03:15 PM
95
cve
cve

CVE-2020-0980

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution...

7.8CVSS

8.3AI Score

0.015EPSS

2020-04-15 03:15 PM
92
cve
cve

CVE-2020-0979

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from...

8.8CVSS

8.8AI Score

0.061EPSS

2020-04-15 03:15 PM
77
cve
cve

CVE-2020-0961

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution...

7.8CVSS

8.1AI Score

0.015EPSS

2020-04-15 03:15 PM
92
cve
cve

CVE-2020-0906

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from...

8.8CVSS

8.8AI Score

0.061EPSS

2020-04-15 03:15 PM
81
cve
cve

CVE-2020-0760

A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from...

8.8CVSS

8.5AI Score

0.047EPSS

2020-04-15 03:15 PM
130
cve
cve

CVE-2020-0892

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852,...

7.8CVSS

8AI Score

0.047EPSS

2020-03-12 04:15 PM
87
cve
cve

CVE-2020-0855

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852,...

7.8CVSS

8AI Score

0.047EPSS

2020-03-12 04:15 PM
66
cve
cve

CVE-2020-0851

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0852, CVE-2020-0855,...

7.8CVSS

8AI Score

0.047EPSS

2020-03-12 04:15 PM
69
cve
cve

CVE-2020-0850

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855,...

8.8CVSS

7.9AI Score

0.047EPSS

2020-03-12 04:15 PM
101
cve
cve

CVE-2020-0759

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution...

8.8CVSS

8.8AI Score

0.047EPSS

2020-02-11 10:15 PM
97
cve
cve

CVE-2020-0697

An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this task as SYSTEM.To exploit the vulnerability, an authenticated attacker would need to place a specially crafted file in a...

7.8CVSS

7.9AI Score

0.001EPSS

2020-02-11 10:15 PM
65
cve
cve

CVE-2020-0696

A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass...

6.5CVSS

6.4AI Score

0.001EPSS

2020-02-11 10:15 PM
70
cve
cve

CVE-2020-0651

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650,...

7.8CVSS

7.9AI Score

0.015EPSS

2020-01-14 11:15 PM
86
cve
cve

CVE-2020-0653

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650,...

7.8CVSS

7.9AI Score

0.015EPSS

2020-01-14 11:15 PM
64
cve
cve

CVE-2020-0650

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0651,...

7.8CVSS

7.9AI Score

0.015EPSS

2020-01-14 11:15 PM
167
cve
cve

CVE-2020-0652

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Memory Corruption...

7.8CVSS

7.8AI Score

0.052EPSS

2020-01-14 11:15 PM
117
cve
cve

CVE-2019-1463

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from...

5.5CVSS

5AI Score

0.0005EPSS

2019-12-10 10:15 PM
60
cve
cve

CVE-2019-1464

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure...

5.5CVSS

5AI Score

0.003EPSS

2019-12-10 10:15 PM
70
cve
cve

CVE-2019-1462

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution...

7.8CVSS

7.9AI Score

0.019EPSS

2019-12-10 10:15 PM
78
cve
cve

CVE-2019-1461

A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service...

6.5CVSS

6.1AI Score

0.003EPSS

2019-12-10 10:15 PM
86
cve
cve

CVE-2019-1400

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from...

5.5CVSS

5AI Score

0.0005EPSS

2019-12-10 10:15 PM
69
cve
cve

CVE-2019-1449

A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would....

9.8CVSS

9.3AI Score

0.006EPSS

2019-11-12 07:15 PM
58
cve
cve

CVE-2019-1448

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution...

7.8CVSS

7.9AI Score

0.015EPSS

2019-11-12 07:15 PM
120
cve
cve

CVE-2019-1446

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure...

5.5CVSS

5.6AI Score

0.003EPSS

2019-11-12 07:15 PM
66
cve
cve

CVE-2019-1402

An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Information Disclosure...

5.5CVSS

5.1AI Score

0.0005EPSS

2019-11-12 07:15 PM
70
cve
cve

CVE-2019-1331

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from...

8.8CVSS

8.8AI Score

0.047EPSS

2019-10-10 02:15 PM
78
cve
cve

CVE-2019-1327

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from...

8.8CVSS

8.8AI Score

0.047EPSS

2019-10-10 02:15 PM
67
cve
cve

CVE-2019-1297

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution...

8.8CVSS

8.8AI Score

0.042EPSS

2019-09-11 10:15 PM
923
In Wild
cve
cve

CVE-2019-1264

A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass...

7.8CVSS

7.5AI Score

0.001EPSS

2019-09-11 10:15 PM
73
cve
cve

CVE-2019-1263

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure...

5.5CVSS

6AI Score

0.003EPSS

2019-09-11 10:15 PM
115
cve
cve

CVE-2019-1246

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1247,...

7.8CVSS

8.5AI Score

0.018EPSS

2019-09-11 10:15 PM
139
cve
cve

CVE-2019-1205

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could...

7.8CVSS

7.5AI Score

0.015EPSS

2019-08-14 09:15 PM
103
cve
cve

CVE-2019-1204

An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages. An attacker who successfully exploited the vulnerability could attempt to force Outlook to load a local or remote message....

4.3CVSS

4.3AI Score

0.002EPSS

2019-08-14 09:15 PM
46
cve
cve

CVE-2019-1199

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative....

7.8CVSS

7.7AI Score

0.017EPSS

2019-08-14 09:15 PM
50
cve
cve

CVE-2019-1200

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example,...

7.8CVSS

7.5AI Score

0.015EPSS

2019-08-14 09:15 PM
60
cve
cve

CVE-2019-1201

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could...

7.8CVSS

7.5AI Score

0.014EPSS

2019-08-14 09:15 PM
114
cve
cve

CVE-2019-1155

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

7.8CVSS

7.7AI Score

0.014EPSS

2019-08-14 09:15 PM
133
cve
cve

CVE-2019-1112

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure...

5.5CVSS

5.6AI Score

0.002EPSS

2019-07-29 02:09 PM
67
cve
cve

CVE-2019-1111

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from...

8.8CVSS

8.8AI Score

0.061EPSS

2019-07-29 02:09 PM
169
cve
cve

CVE-2019-1110

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from...

8.8CVSS

8.8AI Score

0.061EPSS

2019-07-29 02:08 PM
158
cve
cve

CVE-2019-1109

A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the...

9.1CVSS

8.6AI Score

0.001EPSS

2019-07-29 02:08 PM
101
cve
cve

CVE-2019-1084

An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain...

6.5CVSS

5.3AI Score

0.005EPSS

2019-07-15 07:15 PM
200
cve
cve

CVE-2019-1035

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from...

7.8CVSS

7.7AI Score

0.018EPSS

2019-06-12 02:29 PM
94
cve
cve

CVE-2019-1034

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from...

7.8CVSS

7.7AI Score

0.018EPSS

2019-06-12 02:29 PM
67
cve
cve

CVE-2019-0946

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0945,...

7.8CVSS

7.9AI Score

0.021EPSS

2019-05-16 07:29 PM
66
cve
cve

CVE-2019-0953

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution...

7.8CVSS

7.9AI Score

0.014EPSS

2019-05-16 07:29 PM
78
cve
cve

CVE-2019-0945

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0946,...

7.8CVSS

7.9AI Score

0.021EPSS

2019-05-16 07:29 PM
63
cve
cve

CVE-2019-0828

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution...

7.8CVSS

7.8AI Score

0.015EPSS

2019-04-09 09:29 PM
68
cve
cve

CVE-2019-0825

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0826,...

7.8CVSS

7.8AI Score

0.015EPSS

2019-04-09 09:29 PM
57
Total number of security vulnerabilities89