CVE-2015-2503

CVE-2015-2503 is an Office Elevation of Privilege vulnerability that can be triggered via a crafted web site loaded in Internet Explorer to bypass sandbox protections and gain privileges. The initial CVE entry lists Microsoft Office 2007–2016 products (Word, Excel, PowerPoint, Access, InfoPath, V...

CVE-2016-0021

The Microsoft InfoPath XML-based form development tool (versions 2007 SP3 , 2010 SP2 , and 2013 SP1 ) is vulnerable to a memory corruption issue, specifically a buffer overflow . A remote attacker can exploit this by sending a specially crafted Office document , which allows for the execution of ...

CVE-2012-2520

Multiple Microsoft products are affected by an HTML Sanitization Vulnerability (Cross-site scripting) caused by the improper filtering of certain inputs within the HTML filtering component. This allows remote attackers to inject arbitrary web script or HTML, which may execute with the current use...

CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0 (used in Outlook, Windows Live Mail, and Office 2007) performs CRL checks by using an arbitrary URL from a certificate embedded in an S/MIME email or a signed document via the Authority Information Access (AIA) extension. This allows remote attacke...