CVE-2018-0802

CVE-2018-0802 is a Microsoft Office memory corruption/remote code execution vulnerability in the Equation Editor, triggered by crafted OLE/embedded objects in Office documents. Affected products include Office 2007, 2010, 2013, and 2016; the issue arises from the way Office handles in-memory obje...

CVE-2018-0798

The CVE-2018-0798 entry concerns a memory corruption vulnerability in Microsoft Office (Word/Equation Editor) across Office 2007–2016. The root cause is how certain objects are handled in memory, enabling remote code execution when a specially crafted file is opened. Connected documents indicate ...

CVE-2015-1641

CVE-2015-1641 is a Microsoft Office memory-corruption vulnerability triggered by crafted RTF documents. Affected products include Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoin...

CVE-2013-3906

CVE-2013-3906 is a memory corruption vulnerability in Microsoft Windows Graphics Component (TIFF handling) that could allow remote code execution. It affected GDI+ in Windows Vista SP2/Server 2008 SP2 and Office suites (Office 2003 SP3, 2007 SP3, 2010 SP1/SP2, Office Compatibility Pack SP3) and L...

CVE-2016-7262

CVE-2016-7262 is a Microsoft Office vulnerability (Microsoft Excel family) described as a Security Feature Bypass: a crafted cell mishandled on click can allow user-assisted remote command execution. Affected products include Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, Office Compatibi...

CVE-2014-1761

CVE-2014-1761 is a memory-corruption vulnerability in Microsoft Word triggered by crafted RTF data, allowing remote code execution or memory-corruption denial of service. Affected products include Word 2003 SP3, 2007 SP3, 2010 SP1/SP2, 2013 and 2013 RT, Word Viewer, Office Compatibility Pack SP3,...

CVE-2012-2539

CVE-2012-2539 is Microsoft Word remote code execution vulnerability caused by parsing crafted RTF data (Word RTF 'listoverridecount'). It affects Word 2003 SP3, 2007 SP2/SP3, 2010 SP1; Word Viewer; Office Compatibility Pack SP2/SP3; and Office Web Apps 2010 SP1. The underlying issue is memory cor...

CVE-2016-7193

Summary of CVE-2016-7193 : A memory corruption flaw in Microsoft Office’s handling of RTF documents allows remote code execution on affected Office products (Word 2007 SP2, Office 2010 SP2, Word 2013/2016, Word for Mac variants, Office Web Apps Server, etc.). The root cause is a vulnerability in ...

CVE-2015-2424

CVE-2015-2424: Microsoft Office memory corruption in PowerPoint/Word components allows remote code execution or memory corruption via a crafted Office document. Affected products include PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, an...

CVE-2017-11826

CVE-2017-11826 is a remote code execution flaw in Microsoft Office family (Word, Word Viewer, Office Web Apps Server, SharePoint components, etc.) caused by improper handling of objects in memory. Affected products include Word and related Office/SharePoint servers; exploitation is possible via s...

CVE-2018-8628

CVE-2018-8628 is a remote code execution vulnerability affecting Microsoft PowerPoint and related Office components (Office, SharePoint, PowerPoint Viewer, etc.) caused by improper handling of objects in memory. The Nessus/OpenVAS entries confirm the vulnerability across PowerPoint and Office pro...

CVE-2018-0797

CVE-2018-0797 affects Microsoft Word components in Office 2010/2013/2016 where remote code execution can occur through specially crafted RTF content due to memory handling. Public details show Word memory corruption vulnerability enabling code execution when opening malicious files. Microsoft rel...

CVE-2018-0812

The CVE-2018-0812 entry describes a remote code execution vulnerability in Equation Editor across Office products (Word/Office 2003, 2007, 2010, 2013, 2016) due to how objects are handled in memory. The issue affects Word/Office components when processing crafted files, enabling code execution on...

CVE-2018-8378

CVE-2018-8378 describes an information disclosure in Microsoft Office when Office reads out-of-bounds memory due to an uninitialized variable, potentially exposing memory contents. Affected components include Word, SharePoint Server, Word/Excel Viewers, and related Office products. Connected Open...

CVE-2017-8509

CVE-2017-8509 is an Office remote code execution vulnerability that arises when Office components mishandle objects in memory, allowing an attacker to take control of an affected system if a user opens a crafted Office file. Public details in connected documents indicate the vulnerability affects...

CVE-2018-0793

CVE-2018-0793 is a remote code execution vulnerability in Microsoft Outlook (and related Office components) triggered by parsing email messages. The OpenVAS/macOS Nessus entries confirm the issue affecting Outlook parsing and the macOS Office stack, with unrelated Word updates listed in connected...

CVE-2017-8631

CVE-2017-8744 is a remote code execution in Microsoft Office components caused by improper handling of in-memory objects, leading to memory corruption. Documented affected software includes Excel Services and Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, as well as related Office Web...

CVE-2018-8432

CVE-2018-8432 is a remote code execution in Microsoft Graphics Components. It affects Windows and Office components (e.g., Office, Word Viewer, Excel Viewer, PowerPoint Viewer) across multiple Windows and Office versions; the underlying issue is how Graphics Components handle objects in memory. E...

CVE-2017-11854

CVE-2017-11854 affects Microsoft Word 2007 SP3, Word 2010 SP2, Office 2010 SP2, and Office Compatibility Pack SP3. The root cause is improper handling of memory-resident objects, enabling arbitrary code execution in the context of the current user when a specially crafted file is opened. In the d...

CVE-2018-0804

The CVE-2018-0804 entry concerns a remote code execution in the Equation Editor of Microsoft Office 2003–2016 due to the way in-memory objects are handled. Affected software includes Office 2003, 2007, 2010, 2013, and 2016; the root cause is improper handling of objects in memory within the Equat...

CVE-2017-11878

CVE-2017-11878 affects multiple Microsoft Excel/Office components (Excel 2007 SP3, 2017-era Excel/Viewer and Office Compatibility Pack SP3). The vulnerability arises from improper handling of objects in memory, leading to memory corruption that can allow an attacker to execute arbitrary code in t...

CVE-2018-8577

CVE-2018-8577 affects Microsoft Excel (and related Office components). The vulnerability arises when Excel fails to properly handle objects in memory, enabling a remote code execution where an attacker could run arbitrary code in the context of the current user. CVSSv3 vector indicates a local at...

CVE-2019-0669

CVE-2019-0669 is an information-disclosure vulnerability in Microsoft Excel where memory contents can be disclosed when a crafted document is opened. The issue arises from Excel failing to properly isolate or protect memory contents during document processing, enabling an attacker to obtain data ...

CVE-2017-8742

Two CVEs (CVE-2017-8742 and CVE-2017-8743) describe remote code execution in Microsoft PowerPoint family and associated server/web apps due to improper handling of objects in memory. CVE-2017-8742 affects PowerPoint up to 2016, PowerPoint Viewer 2007, SharePoint Server 2013 SP1, SharePoint Enterp...

CVE-2017-11877

CVE-2017-11877 describes a security feature bypass in Microsoft Excel where macro settings were not enforced on a document, potentially allowing macros to run when they should be blocked. Connected MS KB update notes show the issue affects Excel 2016 (and related Excel entry points) and can be mi...

CVE-2018-0796

CVE-2018-0796 is a remote code execution vulnerability affecting Microsoft Excel in Office 2007–2016 due to how in-memory objects are handled. The core issue enables an attacker to run arbitrary code when a crafted file is opened, with a CVSS v3 base score of 8.8 (HIGH) and NETWORK attack vector,...

CVE-2018-0950

CVE-2018-0950: Microsoft Office information disclosure via RTF email rendering. Affected: Office/Word on Windows. Root cause: memory contents disclosure when rendering RTF messages with OLE objects; error in how Office handles memory disclosure. Impact: potential leakage of memory contents to a r...

CVE-2016-7290

CVE-2016-7290 affects Microsoft Word/Office components (Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, Office Web Apps 2010 SP2). The vulnerability allows a crafted document to cause an out-o...

CVE-2018-8627

CVE-2018-8627 (Microsoft Excel information disclosure) : An information-disclosure flaw in Excel when reading memory out of bounds due to an uninitialized variable. Affected products include Microsoft Office/Excel and related viewers. Exploitation requires opening a specially crafted file; succes...

CVE-2018-0794

CVE-2018-0794 affects Microsoft Word across multiple Office versions (Word 2013, 2016, 2010) and is tied to remote code execution via memory handling of objects when opening specially crafted files. The connected MSKB pages confirm this vulnerability family and list concrete patches: Word 2013: K...

CVE-2018-8147

CVE-2018-8147 is a remote code execution vulnerability in Microsoft Excel (Office) tied to improper handling of in-memory objects. The issue could allow an attacker to run arbitrary code in the context of the current user, potentially taking control of the affected system, as described in multipl...

CVE-2018-8597

CVE-2018-8597 is a remote code execution vulnerability in Microsoft Excel/Office where improper handling of in-memory objects can allow arbitrary code execution in the context of the current user. Exploitation typically requires a user to open a specially crafted file, and affects Excel component...

CVE-2017-8501

CVE-2017-8501 is described across connected CNVD/OpenVAS entries as a memory corruption vulnerability in Microsoft Office components (notably Word/Excel/SharePoint) that can be triggered by specially crafted files to yield remote code execution or DoS under the current user. The root cause cited ...

CVE-2015-6038

CVE-2015-6038 affects Microsoft Office products including Excel 2007/2010/2013/2016 (Windows and Mac) and related components, as well as Excel Services on SharePoint Server and Office viewers. The vulnerability stems from memory corruption triggered by specially crafted Office documents, enabling...

CVE-2016-7291

CVE-2016-7291 affects Microsoft Office components including Word 2007 SP3, Office 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2. A crafted document can cause information disclosure by reading memory...

CVE-2018-0806

CVE-2018-0806 concerns the Equation Editor in Microsoft Office (2010–2016 and earlier Office versions listed) allowing remote code execution due to how objects are handled in memory. The description notes this vulnerability as distinct from other nearby CVEs (CVE-2018-0804/0805/0807). The connect...

CVE-2018-0848

CVE-2018-0848 is a Microsoft Office Equation Editor memory‑handling vulnerability affecting Office 2003, 2007, 2010, 2013, and 2016. The issue enables remote code execution due to how objects are managed in memory, per multiple sources (CNVD/NVD/CVE records). Impact is described as remote code ex...

CVE-2017-0105

CVE-2017-0105 is an information-disclosure vulnerability in Microsoft Office components (Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Office Web Apps 2010 SP2) caused by an out-of-bounds re...

CVE-2018-0805

CVE-2018-0805 relates to a remote code execution vulnerability in the Equation Editor of Microsoft Office 2003/2007/2010/2013/2016, caused by how objects are handled in memory. Connected sources (NVD/PRION entries for CVE-2018-0845 and CVE-2018-0862) confirm the affected product family (Microsoft...

CVE-2018-8246

CVE-2018-8246 affects Microsoft Excel and related Office components. The connected advisories describe an information-disclosure vulnerability caused by the inclusion of uninitialized memory when processing parsed expressions in FORMULA records within Excel workbooks, allowing disclosure of sensi...

CVE-2018-0922

CVE-2018-0922 is a remote code execution vulnerability arising from how Office objects are handled in memory across multiple Microsoft Office products (Word, Excel, SharePoint, Web Apps, Viewer, etc.). Connected sources confirm the issue affects a wide range of Office/SharePoint versions (e.g., O...

CVE-2018-8160

CVE-2018-8160 is an information-disclosure vulnerability in Microsoft Outlook (Office suite). The vulnerability is triggered when a user opens a malicious message, which could lead to disclosure of sensitive information. The attacker’s capability path involves sending a crafted email that lures t...

CVE-2018-8427

CVE-2018-8427 is an information-disclosure vulnerability in Microsoft Graphics Components that affects Microsoft Office family products (Office, Word Viewer, PowerPoint/Excel Viewers, Office 365 ProPlus) and related Windows components (Windows Server 2008). The root cause involves improper handli...

CVE-2018-0845

The CVE-2018-0845 issue concerns Equation Editor in Microsoft Office 2003–2016, where a memory handling flaw in Equation Editor can be exploited to achieve remote code execution. The root cause is improper handling of objects in memory, enabling an attacker to run code in the context of the user ...

CVE-2018-1027

Microsoft Excel/Office are affected by CVE-2018-1027, a remote code execution vulnerability caused by improper handling of in-memory objects. The issue affects Excel and Office suites, enabling potential code execution when loaded with crafted data. CVSS references show a high-severity impact (C ...

CVE-2018-8281

CVE-2018-8281: A remote code execution vulnerability in Microsoft Office family (Excel Viewer, PowerPoint Viewer, Office, Word Viewer) arises when Office fails to properly handle objects in memory. Connected documents confirm the issue affects Microsoft Office Viewers and Office-related component...

CVE-2018-0849

CVE-2018-0849 describes a remote code execution vulnerability in Equation Editor across Microsoft Office versions (2003–2016). The root cause is memory handling of objects in Equation Editor, enabling an attacker who can entice a user to open a crafted file to execute code under the current user’...

CVE-2018-0801

CVE-2018-0801 affects Microsoft Office products, specifically the Equation Editor in Office 2007, 2010, 2013, and 2016. The vulnerability arises from the way memory objects are handled in the Equation Editor, enabling remote code execution when a user opens a specially crafted Office file. Connec...

CVE-2018-0862

Summary: CVE-2018-0862 (and related CNVD/NVD entries) describes a memory handling vulnerability in Equation Editor across Microsoft Office 2003, 2007, 2010, 2013, and 2016 that enables remote code execution. The root cause is improper handling of objects in memory within Equation Editor. Impact s...

CVE-2018-8375

CVE-2018-8375 is a remote code execution vulnerability in Microsoft Excel family (Excel, Excel Viewer, Office) caused by improper handling of in-memory objects. The CVE affects Excel-related products and is characterized by a high-impact, possible remote code execution with local attack vector, r...