365 Apps Security Vulnerabilities - CVSS Score 5 - 6

CVE-2020-1224

<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p><p>To exploit the vulnerability, an attacker could craft a spec...

CVE-2020-1342

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.

CVE-2020-1445

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.

CVE-2020-1483

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative ...

CVE-2020-1493

An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users.To exploit this vulnerability, an atta...

CVE-2020-1497

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.To exploit the vulnerability, an attacker could craft a special docume...

CVE-2020-1502

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.To exploit the vulnerability, an attacker could craft a special documen...

CVE-2020-1503

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.To exploit the vulnerability, an attacker could craft a special documen...

CVE-2020-17126

Microsoft Excel Information Disclosure Vulnerability

CVE-2021-28456

Microsoft Excel Information Disclosure Vulnerability

CVE-2021-31174

Microsoft Excel Information Disclosure Vulnerability

CVE-2021-31178

Microsoft Office Information Disclosure Vulnerability

CVE-2021-40454

Rich Text Edit Control Information Disclosure Vulnerability

CVE-2021-40472

Microsoft Excel Information Disclosure Vulnerability

CVE-2021-42295

Visual Basic for Applications Information Disclosure Vulnerability

CVE-2021-43255

Microsoft Office Trust Center Spoofing Vulnerability

CVE-2022-22716

Microsoft Excel Information Disclosure Vulnerability

CVE-2022-23252

Microsoft Office Information Disclosure Vulnerability

CVE-2022-24462

Microsoft Word Security Feature Bypass Vulnerability

CVE-2022-24511

Microsoft Office Word Tampering Vulnerability

CVE-2022-29107

Microsoft Office Security Feature Bypass Vulnerability

CVE-2022-41060

Microsoft Word Information Disclosure Vulnerability

CVE-2022-41103

Microsoft Word Information Disclosure Vulnerability

CVE-2022-41104

Microsoft Excel Security Feature Bypass Vulnerability

CVE-2022-41105

Microsoft Excel Information Disclosure Vulnerability

CVE-2023-21714

Microsoft Office Information Disclosure Vulnerability

CVE-2023-33162

Microsoft Excel Information Disclosure Vulnerability

CVE-2023-36009

Microsoft Word Information Disclosure Vulnerability

CVE-2023-41764

Microsoft Office Spoofing Vulnerability