CVE-2015-2503

CVE-2015-2503 is an Office Elevation of Privilege vulnerability that can be triggered via a crafted web site loaded in Internet Explorer to bypass sandbox protections and gain privileges. The initial CVE entry lists Microsoft Office 2007–2016 products (Word, Excel, PowerPoint, Access, InfoPath, V...

CVE-2016-0021

CVE-2016-0021 is a memory corruption vulnerability in Microsoft Office components (InfoPath 2007 SP3, InfoPath 2010 SP2, InfoPath 2013 SP1) that allows remote code execution via specially crafted Office documents. Root cause: improper handling of in-memory objects during parsing leads to memory c...

CVE-2018-8173

CVE-2018-8173 affects Microsoft InfoPath 2013 SP1 (32- and 64-bit). The root cause is improper handling of objects in memory, enabling remote code execution when a user opens a specially crafted InfoPath form/file. Impact can allow arbitrary code execution in the user’s context; administrative ri...