CVE-2019-1110

CVE-2019-1110 affects Microsoft Excel; a remote code execution vulnerability exists when Excel fails to properly handle objects in memory. Exploitation could allow running arbitrary code in the user’s context; impact is high. The issue is addressed by Microsoft Office security updates in the July...

CVE-2019-0538

CVE-2019-0538 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. A successful exploit could allow an attacker to execute arbitrary code on a vulnerable system by convincing a user to open a specially crafted file. Affected...

CVE-2020-1446

The CVE-2020-1446 entry describes a remote code execution vulnerability in Microsoft Word arising from improper handling of memory objects. The vulnerability affects Microsoft Word and allows an attacker to craft a file that, when opened by a user, could execute actions in the security context of...

CVE-2022-33631

Technical details about CVE-2022-33631 are not publicly available in the provided documents. Monitor for updates from official sources for affected products, vulnerable components, and fixes.

CVE-2023-33148

CVE-2023-33148 : Microsoft Office elevation-of-privilege vulnerability affecting Microsoft Office products (including Excel/Word/Outlook components) across multiple Office suites. Root cause is an elevation of privilege in Office components; impact is high (CVE base CVSS 3.1: 7.8) with LOCAL atta...

CVE-2021-31940

CVE-2021-31940 is Microsoft Office Graphics Remote Code Execution Vulnerability. Connected sources confirm Microsoft Office graphics RCE affecting Office components, with remediation described in KB5001950 (Office 2016, June 2021). The OpenVAS plugins corroborate the presence of this CVE alongsid...

CVE-2012-1847

CVE-2012-1847 affects Microsoft Office Excel and related components (Excel 2003 SP3; Excel 2007 SP2/SP3; Excel 2010 SP1; Office for Mac 2008/2011; Excel Viewer; Office Compatibility Pack SP2/SP3). The vulnerability stems from memory handling when opening specially crafted spreadsheets, enabling r...

CVE-2019-1246

CVE-2019-1246 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Nessus plugin for Security Updates for Microsoft Office products C2R (September 2019) confirms this CVE and notes that the update fixes the Jet Database ...

CVE-2020-16933

Microsoft Word contains a security feature bypass (CVE-2020-16933) due to improper handling of .LNK files. An attacker can craft a .LNK file to perform actions in the current user’s security context when a user opens it (email or web delivery scenarios described). The vulnerability can lead to co...

CVE-2025-26642

CVE-2025-26642 is a Microsoft Office remote code execution vulnerability (out-of-bounds read) that allows a local attacker to run code on the victim’s machine. Public details in connected documents indicate the issue affects Office components (e.g., Excel) and can be triggered via crafted inputs ...

CVE-2013-0007

CVE-2013-0007 impacts Microsoft XML Core Services (MSXML) versions 4.0–6.0. A parsing fault in MSXML can allow remote code execution when a user visits a crafted web page (MSXML XSLT vulnerability). Affected components include MSXML DLLs; root cause is improper XML content parsing. Mitigation is ...

CVE-2018-8378

CVE-2018-8378 describes an information disclosure in Microsoft Office when Office reads out-of-bounds memory due to an uninitialized variable, potentially exposing memory contents. Affected components include Word, SharePoint Server, Word/Excel Viewers, and related Office products. Connected Open...

CVE-2021-28449

CVE-2021-28449 is described as a Microsoft Office remote code execution vulnerability affecting the Office suite (Office/Word/Excel). Connected documents confirm the CVE is part of April 2021 Office updates and is listed alongside other Office RCE CVEs (e.g., CVE-2021-28453, CVE-2021-28454, CVE-2...

CVE-2021-38655

CVE-2021-38655 is a Microsoft Excel remote code execution vulnerability referenced across multiple catalogs. The CVE entry, tied to Excel/Office components, is confirmed in the NVD entry and is cited by various advisories and Nessus plugins as affecting Excel remote code execution, with related C...

CVE-2020-17128

CVE-2020-17128 is a Microsoft Excel remote code execution vulnerability that is cited across multiple Nessus plugins as part of the December 2020 Office security updates. Technical details in the connected documents show Excel-related RCE vulnerabilities addressed together with other CVEs (e.g., ...

CVE-2009-0565

CVE-2009-0565 is a Word buffer-overflow vulnerability caused by a malformed record (Sprm) in Word documents, leading to remote code execution. Affected products include Microsoft Word 2000 SP3, 2002 SP3, 2007 SP1/SP2, Word for Mac 2004/2008, Open XML File Format Converter for Mac, and Office Comp...

CVE-2020-1225

CVE-2020-1225 and CVE-2020-1226 are remote code execution vulnerabilities in Microsoft Excel related to improper handling of objects in memory. Public sources in the provided documents identify Excel (Office) as affected and explicitly reference the vulnerability family as Excel RCE. The connecte...

CVE-2022-26934

CVE-2022-26934 is a Windows Graphics Component information disclosure vulnerability. Affects Windows graphics handling (Windows Graphics Component) and is disclosed as a network-exposed information disclosure with a base CVSSv3.1 score of 6.5 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)...

CVE-2024-43504

CVE-2024-43504 – Microsoft Excel RCE : Public sources confirm a remote code execution vulnerability in Microsoft Excel (Office suite). The vulnerability affects Excel components (including Excel 2016 via KB5002643 and newer Office updates) and can be triggered by user interaction when a crafted f...

CVE-2024-38016

CVE-2024-38016 – Microsoft Office Visio Remote Code Execution is a documented vulnerability affecting Microsoft Visio 2016 (both 32‑bit and 64‑bit), and broader Microsoft Office suites as listed in connected references (including Visio 2019/LTSC 2021 and Microsoft 365 Apps for Enterprise). The is...

CVE-2012-0167

CVE-2012-0167 is a heap-based buffer overflow in the Office GDI+ library affecting Microsoft Office 2003 SP3 and 2007 SP2/SP3. It allows remote attackers to execute arbitrary code by crafting an EMF image embedded in an Office document, i.e., the “GDI+ Heap Overflow Vulnerability.” The issue is t...

CVE-2023-36413

CVE-2023-36413: Microsoft Office security feature bypass vulnerability. Affects Office components (notably Office 2016-era products in references) and can bypass Protected View, allowing opened files to enter editing mode when delivered as a malicious file. Underlying risk is an I: HIGH impact (i...

CVE-2019-1155

CVE-2019-1155 is a Jet Database Engine remote code execution vulnerability in Windows. It arises from improper handling of in-memory objects, enabling an attacker to run arbitrary code on a victim system by enticing the user to open a specially crafted file. The update fixes how the Jet Database ...

CVE-2023-21734

CVE-2023-21734 is a Microsoft Office Remote Code Execution vulnerability reported across multiple sources. The incident affects Microsoft Office products (including Office 2019/2021/365 suites and related components such as SharePoint and Visio) with a high-severity CVSS 3.1 vector (AV:L/AC:L/PR:...

CVE-2024-49026

CVE-2024-49026 is a Microsoft Excel remote code execution vulnerability disclosed for Excel in the Office suite. The initial description and connected documents confirm it affects Excel and was addressed by November 2024 security updates (e.g., KB5002648 for Office Online Server/Month 11 2024 and...

CVE-2023-36895

CVE-2023-36895 is a Microsoft Outlook Remote Code Execution Vulnerability documented across multiple sources. Affected product: Outlook (part of Microsoft Office). Root cause and exact vulnerable component are not detailed in the provided documents, but the CVSS indicates a local, low-complexity ...

CVE-2024-43609

CVE-2024-43609 is a Microsoft Office spoofing vulnerability affecting Office products (including Office 2016/2019/LTSC and Office 365/Copilot-related components) where an attacker can impersonate the user interface. The connected sources describe it as a spoofing vulnerability in Office component...

CVE-2020-16949

CVE-2020-16949 is a denial-of-service flaw in Microsoft Outlook where improper handling of in-memory objects leads to remote DoS after receiving a crafted e‑mail. Public details from multiple sources confirm Outlook vulnerabilities across versions (notably Outlook 2013/KB4484524 references and MS...

CVE-2023-24910

CVE-2023-24910 is a Windows Graphics Component Elevation of Privilege vulnerability. Affected: Windows graphics subsystem components (local component/privilege escalation surface). Root cause: Elevation of privileges with a local attack vector (attack vector Local, low complexity, privileges requ...

CVE-2023-32029

CVE-2023-32029 is a Microsoft Excel/Office remote code execution vulnerability. The CVSSv3.1 metrics indicate a HIGH impact (C/H, I/H, A/H) with a LOCAL attack vector, LOW attack complexity, no privileges required, but USER INTERACTION is required. Several connected scanner entries (Nessus/OpenVA...

CVE-2024-38020

CVE-2024-38020 is a Microsoft Office/Outlook spoofing vulnerability affecting Outlook components (Outlook/Office 2016). The issue allows an attacker to impersonate another user (spoofing) and, per accompanying advisories, is addressed by Microsoft security updates KB5002620/KB5002621 (Office 2016...

CVE-2012-0165

CVE-2012-0165 targets GDI+ EMF processing in Windows and Office, where EMF record type validation is insufficient, enabling remote code execution via a crafted image. Affected: Windows Vista SP2, Windows Server 2008 SP2, and Office 2003 SP3, Office 2007 SP2/SP3, and Office 2010 Gold/SP1 (GDI+). I...

CVE-2021-31179

Technical details about CVE-2021-31179 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability databases for affected products, root cause, and remediation.

CVE-2022-29107

CVE-2022-29107 is a Microsoft Office security feature bypass vulnerability reported across Office components (Word/Office C2R). Connected sources describe a vulnerability that allows bypassing security features and performing unauthorized actions, with security updates issued in May 2022 (C2R/Wor...

CVE-2023-36893

Technical details for CVE-2023-36893 are not provided in the connected documents. No explicit information on affected products, root cause, impact, or fixes is present. Monitor for updates from official sources.

CVE-2024-38021

CVE-2024-38021 is a Microsoft Outlook remote code execution vulnerability affecting the Microsoft Office/Outlook components. The available connected materials confirm an RCE issue in Outlook with references to Microsoft’s update guidance and security updates (e.g., MSRC advisories and KBs for Jul...

CVE-2021-28453

CVE-2021-28453 is a Microsoft Word remote code execution vulnerability. The primary sources (NVD entry for CVE-2021-28453) and connected Nessus plugins reference Word/Office products being affected by a remote code execution vulnerability tied to this CVE. Some Nessus entries list Word/Office as ...

CVE-2021-40454

CVE-2021-40454 is an information-disclosure vulnerability in the Rich Text Edit Control used by Microsoft Office. The issue is documented as a local, low-complexity disclosure that can impact confidentiality (CVE-2021-40454) with a MEDIUM overall severity (CVSS v3.1 base score 5.5). The connected...

CVE-2021-40485

CVE-2021-40485 is described as a Microsoft Excel Remote Code Execution vulnerability. The provided data cites a CVSSv3.1 base score of 7.8 (HIGH), with LOCAL attack vector, LOW attack complexity, NONE privileges required, and user interaction required; impact is HIGH for confidentiality, integrit...

CVE-2021-31177

CVE-2021-31177 is a Microsoft Office/Excel remote code execution vulnerability. Connected sources confirm affected products include Microsoft Office and Excel (C2R and MSI variants) with the issue originating from Office/Excel handling crafted content. Patches released May 11, 2021 (KB5001918 for...

CVE-2023-36045

CVE-2023-36045 is a Microsoft Office Graphics remote code execution vulnerability. Multiple connected sources confirm impact across Microsoft Office components (notably Office/Excel/SharePoint) with possible arbitrary code execution in affected deployments. The CVE is discussed in MSRC/Microsoft ...

CVE-2016-0025

CVE-2016-0025 is a memory corruption vulnerability in Microsoft Office products that allows remote code execution via a crafted Office document. Affected software includes Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Wo...

CVE-2021-31939

CVE-2021-31939 is a Microsoft Excel remote code execution vulnerability reported in the office/Excel component. According to the connected sources, the issue can allow an attacker to execute arbitrary code on a vulnerable system when a user opens or processes specially crafted content, with the C...

CVE-2021-31949

CVE-2021-31949 is a public Microsoft Outlook/Office RCE vulnerability. The connected KB update (KB5001934) documents that this vulnerability is resolved by the June 8, 2021 security update for Outlook 2013 (MSI-based), and notes it does not apply to the Office 2013 Click-to-Run editions (e.g., Mi...

CVE-2022-21841

CVE-2022-21841 is a Microsoft Excel remote code execution vulnerability affecting Excel/Office (C2R) installations. Connected sources describe a pair of vulnerabilities (CVE-2022-21840/21841) that could allow an attacker to bypass authentication and execute arbitrary commands via crafted inputs, ...

CVE-2020-16932

CVE-2020-16932 is a Microsoft Excel remote code execution vulnerability. The issue stems from how Excel handles objects in memory, allowing an attacker to run arbitrary code in the context of the current user when a specially crafted Excel file is opened. Exploitation can occur via email (malicio...

CVE-2020-16954

CVE-2020-16954 is a Microsoft Office remote code execution vulnerability where memory objects are mishandled. An attacker could execute arbitrary code in the context of the logged-in user, potentially taking control of the system if admin rights apply. Exploitation requires a user to open a speci...

CVE-2022-41031

CVE-2022-41031 is a Microsoft Word remote code execution vulnerability. Affected product: Microsoft Word (Office). Underlying issue: unspecified in the provided documents beyond Word involvement; CVSSv3.1 shows 7.8 base score with AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access with ...

CVE-2023-21736

CVE-2023-21736 is a remote code execution vulnerability in Microsoft Office Visio (part of the Office suite). Connected sources confirm it enables arbitrary code execution and is addressed by Microsoft security updates. The CNVD/ENISA/NCSC entries categorize it as a Visio remote code execution is...

CVE-2024-49031

CVE-2024-49031 is a Microsoft Office Graphics Component remote code execution vulnerability. The NVD entry and MITRE/Microsoft references describe a local-attack vector that requires user interaction, with a high impact (C, I, A) and a base CVSSv3.1 score of 7.8. Public listings show affected pro...