Office Security Vulnerabilities and Issues — Page 3 of Office CVE List

Lucene search

MicrosoftOffice

953 matches found

CVE•added 2012/05/09 12:55 a.m.•172 views

CVE-2012-0167

Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image in an Office document, aka "GDI+ Heap Overflow Vulnerability."

9.3CVSS7.9AI score0.65939EPSS

CVE•added 2020/12/10 12:15 a.m.•171 views

CVE-2020-17128

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS7.8AI score0.06139EPSS

CVE•added 2019/08/14 9:15 p.m.•169 views

CVE-2019-1155

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing a victim to open...

9.3CVSS8.8AI score0.09677EPSS

CVE•added 2023/06/14 12:15 a.m.•168 views

CVE-2023-33131

Microsoft Outlook Remote Code Execution Vulnerability

8.8CVSS8.7AI score0.02618EPSS

CVE•added 2022/08/09 8:15 p.m.•167 views

CVE-2022-33631

Microsoft Excel Security Feature Bypass Vulnerability

7.3CVSS7.1AI score0.0194EPSS

CVE•added 2020/04/15 3:15 p.m.•166 views

CVE-2020-0760

A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.

8.8CVSS8.5AI score0.34566EPSS

CVE•added 2023/06/01 2:15 a.m.•166 views

CVE-2022-35742

Microsoft Outlook Denial of Service Vulnerability

7.5CVSS7.3AI score0.05822EPSS

CVE•added 2012/05/09 12:55 a.m.•165 views

CVE-2012-0165

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, aka "GDI+ Record Type Vulnerability."

9.3CVSS7.5AI score0.62114EPSS

CVE•added 2015/12/09 11:59 a.m.•165 views

CVE-2015-6108

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT Gold and 8.1; Office 2007 SP3; Office 2010 SP2; Word Viewer; .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and ...

9.3CVSS7.4AI score0.47364EPSS

CVE•added 2019/09/11 10:15 p.m.•165 views

CVE-2019-1246

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1247, CVE-2019-1248,...

9.3CVSS8.5AI score0.35463EPSS

CVE•added 2012/07/10 9:55 p.m.•164 views

CVE-2012-1854

Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current wo...

6.9CVSS6.4AI score0.00645EPSS

CVE•added 2020/10/16 11:15 p.m.•162 views

CVE-2020-16949

A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system.Exploitation of the vulnerability requires that a spe...

7.5CVSS4.8AI score0.02845EPSS

CVE•added 2021/05/11 7:15 p.m.•160 views

CVE-2021-31179

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.03967EPSS

CVE•added 2023/11/14 6:15 p.m.•160 views

CVE-2023-36413

Microsoft Office Security Feature Bypass Vulnerability

6.5CVSS7AI score0.02668EPSS

CVE•added 2012/05/09 12:55 a.m.•158 views

CVE-2012-0159

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 before 4.1.10329; and Silverlight 5 before 5.1.10411...

9.3CVSS7.4AI score0.6658EPSS

CVE•added 2020/06/09 8:15 p.m.•158 views

CVE-2020-1225

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.

9.3CVSS8.5AI score0.20625EPSS

CVE•added 2023/06/14 12:15 a.m.•158 views

CVE-2023-32029

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.171EPSS

CVE•added 2013/01/09 6:9 p.m.•157 views

CVE-2013-0007

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."

9.3CVSS7.5AI score0.26376EPSS

CVE•added 2021/06/08 11:15 p.m.•157 views

CVE-2021-31940

Microsoft Office Graphics Remote Code Execution Vulnerability

7.8CVSS7.7AI score0.02989EPSS

CVE•added 2021/06/08 11:15 p.m.•157 views

CVE-2021-31949

Microsoft Outlook Remote Code Execution Vulnerability

7.8CVSS7.2AI score0.00578EPSS

CVE•added 2019/08/14 9:15 p.m.•155 views

CVE-2019-1201

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then...

9.3CVSS7.8AI score0.12398EPSS

CVE•added 2020/10/16 11:15 p.m.•155 views

CVE-2020-16954

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with adminis...

7.8CVSS7.7AI score0.10674EPSS

CVE•added 2022/05/10 9:15 p.m.•155 views

CVE-2022-29107

Microsoft Office Security Feature Bypass Vulnerability

5.5CVSS5.6AI score0.04126EPSS

CVE•added 2023/03/14 5:15 p.m.•155 views

CVE-2023-24910

Windows Graphics Component Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00208EPSS

CVE•added 2023/11/14 6:15 p.m.•154 views

CVE-2023-36045

Microsoft Office Graphics Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00319EPSS

CVE•added 2020/12/10 12:15 a.m.•153 views

CVE-2020-17124

Microsoft PowerPoint Remote Code Execution Vulnerability

9.3CVSS7.6AI score0.06282EPSS

CVE•added 2021/05/11 7:15 p.m.•153 views

CVE-2021-31177

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.04716EPSS

CVE•added 2021/09/15 12:15 p.m.•153 views

CVE-2021-38655

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.06999EPSS

CVE•added 2023/07/11 6:15 p.m.•153 views

CVE-2023-33148

Microsoft Office Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0127EPSS

CVE•added 2024/04/09 5:15 p.m.•153 views

CVE-2024-26257

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS8AI score0.00511EPSS

CVE•added 2019/11/12 7:15 p.m.•152 views

CVE-2019-1448

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.3CVSS7.9AI score0.38019EPSS

CVE•added 2020/10/16 11:15 p.m.•152 views

CVE-2020-16957

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.An attacker could exploit this vulnerability by enticing ...

9.3CVSS7.7AI score0.08062EPSS

CVE•added 2021/08/12 6:15 p.m.•152 views

CVE-2021-36941

Microsoft Word Remote Code Execution Vulnerability

7.8CVSS7.6AI score0.01861EPSS

CVE•added 2022/01/11 9:15 p.m.•152 views

CVE-2022-21840

Microsoft Office Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.09199EPSS

CVE•added 2023/08/08 6:15 p.m.•152 views

CVE-2023-36896

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00766EPSS

CVE•added 2021/10/13 1:15 a.m.•151 views

CVE-2021-40454

Rich Text Edit Control Information Disclosure Vulnerability

5.5CVSS6.7AI score0.00145EPSS

CVE•added 2022/05/10 9:15 p.m.•151 views

CVE-2022-26934

Windows Graphics Component Information Disclosure Vulnerability

6.5CVSS7.6AI score0.16898EPSS

CVE•added 2012/05/09 12:55 a.m.•150 views

CVE-2012-0142

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Fi...

9.3CVSS7.4AI score0.62114EPSS

CVE•added 2020/10/16 11:15 p.m.•150 views

CVE-2020-16930

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administ...

7.8CVSS7.7AI score0.1023EPSS

CVE•added 2021/04/13 8:15 p.m.•150 views

CVE-2021-28449

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.03567EPSS

CVE•added 2023/08/08 6:15 p.m.•150 views

CVE-2023-36895

Microsoft Outlook Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00631EPSS

CVE•added 2024/10/08 6:15 p.m.•150 views

CVE-2024-43609

Microsoft Office Spoofing Vulnerability

6.5CVSS6.5AI score0.13093EPSS

CVE•added 2021/05/11 7:15 p.m.•149 views

CVE-2021-31176

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.04543EPSS

CVE•added 2021/10/13 1:15 a.m.•149 views

CVE-2021-40474

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.03232EPSS

CVE•added 2023/01/10 10:15 p.m.•148 views

CVE-2023-21736

Microsoft Office Visio Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00358EPSS

CVE•added 2023/11/14 6:15 p.m.•148 views

CVE-2023-36041

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.03371EPSS

CVE•added 2012/05/09 12:55 a.m.•147 views

CVE-2012-0184

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka ...

9.3CVSS7.5AI score0.58804EPSS

CVE•added 2022/10/11 7:15 p.m.•147 views

CVE-2022-41031

Microsoft Word Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02786EPSS

CVE•added 2017/03/17 12:59 a.m.•146 views

CVE-2017-0108

The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via...

9.3CVSS7AI score0.36288EPSS

CVE•added 2019/01/08 9:29 p.m.•146 views

CVE-2019-0582

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Se...

9.3CVSS8AI score0.35437EPSS

Total number of security vulnerabilities953