CVE-2022-35742

CVE-2022-35742 is a Microsoft Outlook Denial of Service vulnerability. Public sources (CVE entry, MSRC update page, and third‑party summaries) describe it as a DoS that can crash the Outlook client when processing a crafted message. The vulnerability is reported to be exploitable via network‑deli...

CVE-2022-24509

CVE-2022-24509 affects Microsoft Office Visio and is described as a Remote Code Execution Vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.8 (HIGH) with local attack vector, user interaction required, and high impact on confidentiality, integrity, and availability; CVSSv2 indicates b...

CVE-2023-28285

CVE-2023-28285 is a Microsoft Office remote code execution vulnerability affecting Office products (including Microsoft 365 Apps/Office for enterprise). The issue enables code execution through a specially crafted file that a user must open, aligning with a local attack vector and requiring user ...

CVE-2021-34501

CVE-2021-34501 is described as a Microsoft Excel remote code execution vulnerability. Connected materials identify affected products as Excel in multiple Office suites (including 2013/2016 and Office Online Server variants) and indicate that exploitation could allow remote code execution. Public ...

CVE-2020-16929

CVE-2020-16929 (Microsoft Excel RCE) is a remote code execution vulnerability caused by improper handling of in-memory objects. Successful exploitation requires a user to open a specially crafted Excel file, via email or web-hosted lure. If the user runs with administrative rights, an attacker co...

CVE-2024-30103

CVE-2024-30103 is a confirmed Microsoft Outlook remote code execution vulnerability. The CVE affects Outlook components (e.g., Outlook.exe and related Office/Outlook binaries) and is exploitable remotely without user interaction via a crafted email, per the CVSS_3.1 metrics (AV:N/AC:L/PR:L/UI:N/S...

CVE-2023-23398

Technical details about CVE-2023-23398 are not provided in the supplied documents. Public information in these sources is limited; monitor for updates from official advisories (MSRC) and vendors.

CVE-2022-29109

CVE-2022-29109 affects Microsoft Excel and is described as a remote code execution vulnerability in Excel/Office components. The Open-related documents confirm affected products include Excel and Office Web Apps, with remediation via Microsoft security updates (e.g., KB5002205 for the Office Onli...

CVE-2024-21402

CVE-2024-21402 is a Microsoft Outlook Elevation of Privilege vulnerability. The CVE affects Outlook as part of Microsoft Office/365 suites and is triggered locally, enabling a low-privileged user to escalate to higher privileges on the affected system. The base CVSSv3.1 score is 7.1 (HIGH) with P...

CVE-2024-49069

CVE-2024-49069 is an Excel remote code execution vulnerability in Microsoft Office. The issue targets Excel components and can let an attacker execute arbitrary code by tricking a user into opening a maliciously crafted file. The entry lists a CVSS v3.1 base score of 7.8 (High) with LOCAL attack ...

CVE-2020-1446

The CVE-2020-1446 entry describes a remote code execution vulnerability in Microsoft Word arising from improper handling of memory objects. The vulnerability affects Microsoft Word and allows an attacker to craft a file that, when opened by a user, could execute actions in the security context of...

CVE-2022-33631

Technical details about CVE-2022-33631 are not publicly available in the provided documents. Monitor for updates from official sources for affected products, vulnerable components, and fixes.

CVE-2021-31940

CVE-2021-31940 is Microsoft Office Graphics Remote Code Execution Vulnerability. Connected sources confirm Microsoft Office graphics RCE affecting Office components, with remediation described in KB5001950 (Office 2016, June 2021). The OpenVAS plugins corroborate the presence of this CVE alongsid...

CVE-2023-33148

CVE-2023-33148 : Microsoft Office elevation-of-privilege vulnerability affecting Microsoft Office products (including Excel/Word/Outlook components) across multiple Office suites. Root cause is an elevation of privilege in Office components; impact is high (CVE base CVSS 3.1: 7.8) with LOCAL atta...

CVE-2026-62870

CVE-2026-62870 describes a use-after-free in Microsoft Excel that could allow a remote attacker to execute code over a network. The issue has a high impact (C/H/I/A) with network-based, low-attack-complexity exploitation and requires user interaction. Microsoft has published a security update (KB...

CVE-2020-16933

Microsoft Word contains a security feature bypass (CVE-2020-16933) due to improper handling of .LNK files. An attacker can craft a .LNK file to perform actions in the current user’s security context when a user opens it (email or web delivery scenarios described). The vulnerability can lead to co...

CVE-2021-28449

CVE-2021-28449 is described as a Microsoft Office remote code execution vulnerability affecting the Office suite (Office/Word/Excel). Connected documents confirm the CVE is part of April 2021 Office updates and is listed alongside other Office RCE CVEs (e.g., CVE-2021-28453, CVE-2021-28454, CVE-2...

CVE-2021-38655

CVE-2021-38655 is a Microsoft Excel remote code execution vulnerability referenced across multiple catalogs. The CVE entry, tied to Excel/Office components, is confirmed in the NVD entry and is cited by various advisories and Nessus plugins as affecting Excel remote code execution, with related C...

CVE-2024-26257

CVE-2024-26257 affects Microsoft Excel (Office) with a remote code execution vulnerability. Base CVSS v3.1 score 7.8 (HIGH): attack vector LOCAL, requires user interaction, no privileges required, and impacts C/I/A HIGH. Root cause/details are not fully described in the documents, but Microsoft r...

CVE-2025-26642

CVE-2025-26642 is a Microsoft Office remote code execution vulnerability (out-of-bounds read) that allows a local attacker to run code on the victim’s machine. Public details in connected documents indicate the issue affects Office components (e.g., Excel) and can be triggered via crafted inputs ...

CVE-2020-17128

CVE-2020-17128 is a Microsoft Excel remote code execution vulnerability that is cited across multiple Nessus plugins as part of the December 2020 Office security updates. Technical details in the connected documents show Excel-related RCE vulnerabilities addressed together with other CVEs (e.g., ...

CVE-2022-26934

CVE-2022-26934 is a Windows Graphics Component information disclosure vulnerability. Affects Windows graphics handling (Windows Graphics Component) and is disclosed as a network-exposed information disclosure with a base CVSSv3.1 score of 6.5 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)...

CVE-2024-43504

CVE-2024-43504 – Microsoft Excel RCE : Public sources confirm a remote code execution vulnerability in Microsoft Excel (Office suite). The vulnerability affects Excel components (including Excel 2016 via KB5002643 and newer Office updates) and can be triggered by user interaction when a crafted f...

CVE-2020-1225

CVE-2020-1225 and CVE-2020-1226 are remote code execution vulnerabilities in Microsoft Excel related to improper handling of objects in memory. Public sources in the provided documents identify Excel (Office) as affected and explicitly reference the vulnerability family as Excel RCE. The connecte...

CVE-2020-16918

CVE-2020-16918 is a remote code execution flaw in the Base3D rendering engine caused by improper memory handling. The vulnerability permits an attacker to gain execution on the victim’s system when the affected rendering component processes memory contents; Microsoft’s advisory describes the fix ...

CVE-2024-38016

CVE-2024-38016 – Microsoft Office Visio Remote Code Execution is a documented vulnerability affecting Microsoft Visio 2016 (both 32‑bit and 64‑bit), and broader Microsoft Office suites as listed in connected references (including Visio 2019/LTSC 2021 and Microsoft 365 Apps for Enterprise). The is...

CVE-2023-36413

CVE-2023-36413: Microsoft Office security feature bypass vulnerability. Affects Office components (notably Office 2016-era products in references) and can bypass Protected View, allowing opened files to enter editing mode when delivered as a malicious file. Underlying risk is an I: HIGH impact (i...

CVE-2020-17123

CVE-2020-17123 is a Microsoft Excel Remote Code Execution vulnerability. Public documents confirm an RCE exists in Excel when processing specially crafted Office files, with the underlying issue tied to Excel components/file handling (the CVE is listed among Excel-related updates for December 202...

CVE-2023-21734

CVE-2023-21734 is a Microsoft Office Remote Code Execution vulnerability reported across multiple sources. The incident affects Microsoft Office products (including Office 2019/2021/365 suites and related components such as SharePoint and Visio) with a high-severity CVSS 3.1 vector (AV:L/AC:L/PR:...

CVE-2023-36895

CVE-2023-36895 is a Microsoft Outlook Remote Code Execution Vulnerability documented across multiple sources. Affected product: Outlook (part of Microsoft Office). Root cause and exact vulnerable component are not detailed in the provided documents, but the CVSS indicates a local, low-complexity ...

CVE-2020-16949

CVE-2020-16949 is a denial-of-service flaw in Microsoft Outlook where improper handling of in-memory objects leads to remote DoS after receiving a crafted e‑mail. Public details from multiple sources confirm Outlook vulnerabilities across versions (notably Outlook 2013/KB4484524 references and MS...

CVE-2023-32029

CVE-2023-32029 is a Microsoft Excel/Office remote code execution vulnerability. The CVSSv3.1 metrics indicate a HIGH impact (C/H, I/H, A/H) with a LOCAL attack vector, LOW attack complexity, no privileges required, but USER INTERACTION is required. Several connected scanner entries (Nessus/OpenVA...

CVE-2024-43609

CVE-2024-43609 is a Microsoft Office spoofing vulnerability affecting Office products (including Office 2016/2019/LTSC and Office 365/Copilot-related components) where an attacker can impersonate the user interface. The connected sources describe it as a spoofing vulnerability in Office component...

CVE-2024-49026

CVE-2024-49026 is a Microsoft Excel remote code execution vulnerability disclosed for Excel in the Office suite. The initial description and connected documents confirm it affects Excel and was addressed by November 2024 security updates (e.g., KB5002648 for Office Online Server/Month 11 2024 and...

CVE-2024-38020

CVE-2024-38020 is a Microsoft Office/Outlook spoofing vulnerability affecting Outlook components (Outlook/Office 2016). The issue allows an attacker to impersonate another user (spoofing) and, per accompanying advisories, is addressed by Microsoft security updates KB5002620/KB5002621 (Office 2016...

CVE-2021-31179

Technical details about CVE-2021-31179 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability databases for affected products, root cause, and remediation.

CVE-2022-29107

CVE-2022-29107 is a Microsoft Office security feature bypass vulnerability reported across Office components (Word/Office C2R). Connected sources describe a vulnerability that allows bypassing security features and performing unauthorized actions, with security updates issued in May 2022 (C2R/Wor...

CVE-2021-28453

CVE-2021-28453 is a Microsoft Word remote code execution vulnerability. The primary sources (NVD entry for CVE-2021-28453) and connected Nessus plugins reference Word/Office products being affected by a remote code execution vulnerability tied to this CVE. Some Nessus entries list Word/Office as ...

CVE-2021-40485

CVE-2021-40485 is described as a Microsoft Excel Remote Code Execution vulnerability. The provided data cites a CVSSv3.1 base score of 7.8 (HIGH), with LOCAL attack vector, LOW attack complexity, NONE privileges required, and user interaction required; impact is HIGH for confidentiality, integrit...

CVE-2023-36893

Technical details for CVE-2023-36893 are not provided in the connected documents. No explicit information on affected products, root cause, impact, or fixes is present. Monitor for updates from official sources.

CVE-2024-38021

CVE-2024-38021 is a Microsoft Outlook remote code execution vulnerability affecting the Microsoft Office/Outlook components. The available connected materials confirm an RCE issue in Outlook with references to Microsoft’s update guidance and security updates (e.g., MSRC advisories and KBs for Jul...

CVE-2021-40454

CVE-2021-40454 is an information-disclosure vulnerability in the Rich Text Edit Control used by Microsoft Office. The issue is documented as a local, low-complexity disclosure that can impact confidentiality (CVE-2021-40454) with a MEDIUM overall severity (CVSS v3.1 base score 5.5). The connected...

CVE-2023-36045

CVE-2023-36045 is a Microsoft Office Graphics remote code execution vulnerability. Multiple connected sources confirm impact across Microsoft Office components (notably Office/Excel/SharePoint) with possible arbitrary code execution in affected deployments. The CVE is discussed in MSRC/Microsoft ...

CVE-2021-31939

CVE-2021-31939 is a Microsoft Excel remote code execution vulnerability reported in the office/Excel component. According to the connected sources, the issue can allow an attacker to execute arbitrary code on a vulnerable system when a user opens or processes specially crafted content, with the C...

CVE-2026-64898

CVE-2026-64898 describes a heap-based buffer overflow in Microsoft Office that enables a local code execution under an attack vector of local access with user interaction required. The CVSS 3.1 metrics indicate high severity (base score 7.8), with impact to confidentiality, integrity, and availab...

CVE-2021-31177

CVE-2021-31177 is a Microsoft Office/Excel remote code execution vulnerability. Connected sources confirm affected products include Microsoft Office and Excel (C2R and MSI variants) with the issue originating from Office/Excel handling crafted content. Patches released May 11, 2021 (KB5001918 for...

CVE-2021-31949

CVE-2021-31949 is a public Microsoft Outlook/Office RCE vulnerability. The connected KB update (KB5001934) documents that this vulnerability is resolved by the June 8, 2021 security update for Outlook 2013 (MSI-based), and notes it does not apply to the Office 2013 Click-to-Run editions (e.g., Mi...

CVE-2020-16954

CVE-2020-16954 is a Microsoft Office remote code execution vulnerability where memory objects are mishandled. An attacker could execute arbitrary code in the context of the logged-in user, potentially taking control of the system if admin rights apply. Exploitation requires a user to open a speci...

CVE-2022-21841

CVE-2022-21841 is a Microsoft Excel remote code execution vulnerability affecting Excel/Office (C2R) installations. Connected sources describe a pair of vulnerabilities (CVE-2022-21840/21841) that could allow an attacker to bypass authentication and execute arbitrary commands via crafted inputs, ...

CVE-2024-49031

CVE-2024-49031 is a Microsoft Office Graphics Component remote code execution vulnerability. The NVD entry and MITRE/Microsoft references describe a local-attack vector that requires user interaction, with a high impact (C, I, A) and a base CVSSv3.1 score of 7.8. Public listings show affected pro...