Lucene search
K

15 matches found

CNNVD
CNNVD
added 2026/05/12 12:0 a.m.8 views

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software within the Office suite developed by Microsoft Corporation. There is a resource management vulnerability in Microsoft Word. Attackers can exploit this vulnerability to execute code remotely. The following products and versions are affected: Microsoft...

8.4CVSS5.9AI score0.00057EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.7 views

Microsoft Word 安全漏洞

Microsoft Word is a word processing software within the Office suite developed by Microsoft Corporation. There are security vulnerabilities in Microsoft Word. Attackers can exploit these vulnerabilities to execute code remotely. The following products and versions are affected: Microsoft SharePoi...

8.4CVSS5.9AI score0.0007EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.6 views

Microsoft Word 安全漏洞

Microsoft Word is a word processing software within the Office suite developed by Microsoft Corporation. There are security vulnerabilities in Microsoft Word. Attackers can exploit these vulnerabilities to obtain sensitive information. The following products and versions are affected: Microsoft 3...

4.3CVSS5.8AI score0.00053EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.5 views

Microsoft Word 安全漏洞

Microsoft Word is a word processing software within the Office suite developed by Microsoft Corporation. There are security vulnerabilities in Microsoft Word. Attackers can exploit these vulnerabilities to obtain sensitive information. The following products and versions are affected: Microsoft...

5.5CVSS5.8AI score0.00042EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/12 12:0 a.m.6 views

Security Updates for Microsoft Word Products (May 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Access of resource using incompatible type 'type confusion' in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-40364 - Use after free in...

8.4CVSS6.1AI score0.00192EPSS
Exploits0References7
Talos Blog
Talos Blog
added 2026/04/14 8:27 p.m.4 views

Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent Vulnerabilities

Microsoft has released its monthly security update for April 2026, which includes 165 vulnerabilities affecting a wide range of products, including eight Microsoft marked as "critical." CVE-2026-23666 is a critical Denial of Service DoS vulnerability that affects the .NET framework. Successful...

9.8CVSS6.8AI score0.53056EPSS
Exploits13
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.2 views

Security Updates for Microsoft Word Products C2R (August 2025)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities that attackers can exploit to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has instead...

8.4CVSS5.7AI score0.01434EPSS
Exploits0References5
Microsoft KB
Microsoft KB
added 2025/08/12 7:0 a.m.6 views

Description of the security update for SharePoint Server 2019 Language Pack: August 12, 2025 (KB5002770)

Description of the security update for SharePoint Server 2019 Language Pack: August 12, 2025 KB5002770 Summary This security update resolves a Microsoft Word remote code execution vulnerability and Microsoft Word information disclosure vulnerability. To learn more about the vulnerabilities, see t...

8.4CVSS6.7AI score0.01434EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/03/14 12:0 a.m.26 views

Security Updates for Microsoft Word Products C2R (March 2025)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-24078, CVE-2025-24079 Note that...

7.8CVSS8.9AI score0.00209EPSS
Exploits0References5
Microsoft KB
Microsoft KB
added 2022/11/08 8:0 a.m.39 views

Description of the security update for SharePoint Server Subscription Edition Language Pack: November 8, 2022 (KB5002291)

Description of the security update for SharePoint Server Subscription Edition Language Pack: November 8, 2022 KB5002291 Summary This security update resolves a Microsoft Word remote code execution vulnerability and Microsoft Word information disclosure vulnerability. To learn more about the...

7.8CVSS7.2AI score0.01693EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2022/11/08 12:0 a.m.26 views

Description of the security update for SharePoint Server 2019 Language Pack: November 8, 2022 (KB5002295)

Description of the security update for SharePoint Server 2019 Language Pack: November 8, 2022 KB5002295 Summary This security update resolves a Microsoft Word information disclosure vulnerability and Microsoft Word remote code execution vulnerability. To learn more about the vulnerabilities, see...

7.8CVSS7.4AI score0.01693EPSS
Exploits0
NCSC
NCSC
added 2021/04/13 12:0 a.m.3 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Office products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Accessing sensitive data. Execution of arbitrary code User Rights Denial-of-Service Below is a summary of the...

7.8CVSS7AI score0.17031EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:0 a.m.1 views

The vulnerability of Microsoft Word, Microsoft Office products, and Office 365 allows a perpetrator to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, Office 365, and the Microsoft Word text editor are related to errors in memory object handling. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code remotely, using a specially crafted web page or file...

10CVSS0.16941EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2014/03/24 7:0 p.m.3 views

CVE-2014-1761

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attacker...

8.1AI score0.93336EPSS
Exploits10References2
Tenable Nessus
Tenable Nessus
added 2003/03/10 12:0 a.m.51 views

MS02-031: Cumulative patches for Excel and Word for Windows (324458)

The versions of Microsoft Word and Excel installed on the remote host are missing a security update. They are, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Excel due to improper handling of formatted inline macros that are attached to objects withi...

7.5CVSS6.1AI score0.19687EPSS
Exploits0References5
Rows per page
Query Builder