CVE-2020-16931

CVE-2020-16931 affects Microsoft Excel. A remote code execution flaw arises from improper handling of in-memory objects, allowing arbitrary code execution in the attacker’s context if a user opens a specially crafted Excel file. Exploitation scenarios include email attachments or hosting a crafte...

CVE-2020-16932

CVE-2020-16932 is a Microsoft Excel remote code execution vulnerability. The issue stems from how Excel handles objects in memory, allowing an attacker to run arbitrary code in the context of the current user when a specially crafted Excel file is opened. Exploitation can occur via email (malicio...

CVE-2022-41031

CVE-2022-41031 is a Microsoft Word remote code execution vulnerability. Affected product: Microsoft Word (Office). Underlying issue: unspecified in the provided documents beyond Word involvement; CVSSv3.1 shows 7.8 base score with AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access with ...

CVE-2023-36041

CVE-2023-36041 : Microsoft Excel Remote Code Execution vulnerability. The CVE affects Microsoft Excel with a published PoC and is cited in Microsoft Patch Tuesday coverage as a vulnerability with PoCs for Excel. Affected product is Excel (Office suite); CVSS v3.1 base score 7.8 (HIGH) with LOCAL ...

CVE-2020-16957

CVE-2020-16957 is a Microsoft Office vulnerability in the Office Access Connectivity Engine where objects in memory are mishandled, enabling remote code execution if a user opens a crafted file. The root cause is improper handling of in-memory objects. Affected product area: the Office Access Con...

CVE-2021-40474

CVE-2021-40474 : Microsoft Excel remote code execution vulnerability. According to the sources, it affects Office/Excel components and has a CVSSv3.1 base score of 7.8 (vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The issue is described as a local vulnerability that requires user intera...

CVE-2023-21736

CVE-2023-21736 is a remote code execution vulnerability in Microsoft Office Visio (part of the Office suite). Connected sources confirm it enables arbitrary code execution and is addressed by Microsoft security updates. The CNVD/ENISA/NCSC entries categorize it as a Visio remote code execution is...

CVE-2020-16930

CVE-2020-16930 is a Microsoft Excel remote code execution vulnerability caused by improper handling of in-memory objects. An attacker could run arbitrary code in the context of the current user, potentially taking full control if the user is an admin. Exploitation requires opening a specially cra...

CVE-2020-17124

CVE-2020-17124 is an Microsoft PowerPoint remote code execution vulnerability. Connected sources confirm it affects PowerPoint/Office, with December 2020 security updates released to address it. Severity is high (CVSSv3.1 base 7.8 / 9.3 from CVSS v2). No exploitation details are provided in the d...

CVE-2023-35371

CVE-2023-35371 is described in the initial record as a Microsoft Office remote code execution vulnerability (Office Remote Code Execution Vulnerability). The connected sources corroborate that it affects Microsoft Office components, including Excel, and list CVE-2023-35371 alongside CVE-2023-3689...

CVE-2025-21356

CVE-2025-21356 concerns Microsoft Office Visio. Connected sources describe a remote code execution vulnerability in Visio due to type obfuscation and a heap-based buffer overflow when accessing resources, enabling arbitrary code execution on a user’s system. Affected product is Microsoft Visio (O...

CVE-2019-0582

CVE-2019-0582 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of objects in memory. The vulnerability affects multiple Windows versions and can be triggered when a user opens a specially crafted file, enabling arbitrary code execution with the attack...

CVE-2021-1714

CVE-2021-1714 is an Excel remote code execution vulnerability affecting Microsoft Excel (Office). The connected sources indicate a vulnerability in Excel with a CVSS v3.1 base score of 7.8 (HIGH) and an attack vector LOCAL requiring user interaction, with confidentiality, integrity, and availabil...

CVE-2021-31176

CVE-2021-31176 is a Microsoft Office remote code execution vulnerability affecting Office 2013/2016. Public documentation in the provided connected sources confirms a remote code execution class issue, with Microsoft reference pages and Nessus/OpenVAS entries listing CVE-2021-31176 among Office u...

CVE-2021-36941

CVE-2021-36941 is a Microsoft Word remote code execution vulnerability affecting Word/Office products. CVSS 3.1: local exploit, user interaction required, HIGH impact (C/I/A H). The connected documents mention Office Word/365 RCE contexts, but do not provide concrete root-cause or fixed-version d...

CVE-2023-29333

CVE-2023-29333 is a denial-of-service issue affecting Microsoft Office Access. The vulnerability is described as a local-access flaw with low impact on availability (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L). Affected surface includes Microsoft Access (and related Office components) with the...

CVE-2004-0200

CVE-2004-0200 is a buffer-overflow vulnerability in the JPEG parsing engine of Microsoft GDI+ (GDIPlus.dll). The flaw allows remote code execution when a specially crafted JPEG image is processed, with the attack vector involving JPEG data that is mis-sized during a memory copy. The vulnerability...

CVE-2019-1448

CVE-2019-1448 is a Microsoft Excel remote code execution vulnerability. The connected documents describe that Excel fails to properly handle objects in memory, leading to the execution of arbitrary code when a user opens a specially crafted file (as seen in Office/Excel advisories and Nessus entr...

CVE-2007-5348

The CVE-2007-5348 entry concerns an IMAGE processing vulnerability in Microsoft GDI+ that could enable remote code execution. The connected KB954593 article MS08-052 describes multiple vulnerabilities in GDI+ across Windows and Office components that could be exploited by viewing a specially craf...

CVE-2017-0108

CVE-2017-0108 is a remote-code-execution vulnerability in the Windows Graphics Component, exploited via untrusted fonts processed by Uniscribe (usp10.dll) and exposed through graphics-related API calls invoked by user32/draw text paths. Google Project Zero’s Uniscribe fuzzing identified 8 high‑se...

CVE-2019-1149

CVE-2019-1149 is a remote code execution vulnerability in the Windows font library caused by improper handling of embedded fonts (Microsoft Graphics Remote Code Execution). It can allow an attacker to take control of the system, install programs, or modify data after successful exploitation via w...

CVE-2020-17122

CVE-2020-17122 is a Microsoft Excel remote code execution vulnerability. The public details in the supplied documents identify Excel (Office component) as affected, with the vulnerability categorized as a remote code execution issue in multiple Office deployments. The NVD entry notes a CVSSv3.1 b...

CVE-2021-1715

CVE-2021-1715 is a Microsoft Word Remote Code Execution vulnerability. The CVE is referenced in several January 2021 security-update advisories (Word/Office products) and appears in Nessus plugins cataloging Word and Office patches alongside related CVEs (e.g., CVE-2021-1716). The connected docum...

CVE-2022-24473

This entry concerns CVE-2022-24473: a remote code execution vulnerability in Microsoft Excel (part of the Microsoft Office suite). The vulnerability is described as affecting Excel with the potential for an attacker to execute arbitrary code, with the CVSS scores indicating a high-severity impact...

CVE-2025-21362

CVE-2025-21362 is Microsoft Excel remote code execution vulnerability. Connected CNVD-2025-02966 describes it as a Microsoft Excel resource management error that could allow an attacker to remotely execute code. Public references indicate Microsoft released January 2025 security updates (KB500267...

CVE-2009-2500

This CVE corresponds to MS09-062: GDI+ WMF Integer Overflow Vulnerability. Affected are Microsoft GDI+ image-processing paths used by WMF, PNG, TIFF, BMP handling across Windows components and Office/Viewer products (e.g., IE6, Office suites, Visio, Project, SQL/Report Viewer, Forefront Client Se...

CVE-2013-1315

CVE-2013-1315 is a remote code execution/memory corruption vulnerability affecting Microsoft Office components. The public records identify affected products as Microsoft SharePoint Server 2007 SP3, 2010 SP1/SP2, 2013; Office Web Apps 2010; Excel 2003 SP3/2007 SP3/2010 SP1/SP2/2013/2013 RT; Offic...

CVE-2023-21737

CVE-2023-21737 is a Microsoft Office Visio Remote Code Execution vulnerability. Public sources in the Connected documents confirm it affects Microsoft Office Visio (Visio component) and is classified as high severity (CVSS v3.1 base score 7.8) with local attack vector and required user interactio...

CVE-2023-36037

CVE-2023-36037 is a Microsoft Excel security feature bypass vulnerability. Public sources label it as a high-severity, local-access issue with high impact to confidentiality, integrity, and availability (CVSSv3.1: AV=L, AC=L, PR=None, UI=Required, S=U, C/H/I/A=H). Exploitation status is not discl...

CVE-2012-0184

CVE-2012-0184 affects Microsoft Excel and related Office components: Excel 2003 SP3, 2007 SP2/SP3, 2010 Gold/SP1; Office for Mac 2008/2011; Excel Viewer; Office Compatibility Pack SP2/SP3. The issue is a memory handling error when opening a crafted spreadsheet, enabling remote code execution. Thi...

CVE-2020-17125

CVE-2020-17125 is a Microsoft Excel Remote Code Execution vulnerability. The connected Nessus/Excel update references confirm: exploit requires a user, local access, and a specially crafted Excel file can trigger arbitrary code execution on affected Office/Excel builds. Remediation is available v...

CVE-2021-31175

CVE-2021-31175 is a Microsoft Office/Excel remote code execution vulnerability described as a Microsoft Office Remote Code Execution Vulnerability. Connection documents confirm it is part of a set of Office/Excel remote code execution vulnerabilities addressed by May 2021 security updates (e.g., ...

CVE-2021-31180

CVE-2021-31180 corresponds to a Microsoft Office Graphics remote code execution vulnerability. The NVD entry identifies it as affecting Microsoft Office Graphics, with a base CVSS 3.1 score of 7.8 (HIGH), and notes potential high impact to confidentiality, integrity, and availability upon exploit...

CVE-2020-0901

CVE-2020-0901 is a remote code execution vulnerability in Microsoft Excel related to improper handling of memory objects. The issue affects Office/Excel components (including Excel on Windows and macOS via Office for Mac), where an attacker could run arbitrary code in the context of the current u...

CVE-2020-17129

CVE-2020-17129 is a Microsoft Excel remote code execution vulnerability documented in multiple sources linked to the December 2020 Excel security updates. The Nessus plugin groups this CVE with other Excel RCE flaws and notes that affected Office/Excel products were missing security updates, impl...

CVE-2017-8527

Technical details for CVE-2017-8527 are not publicly available in the provided documents. No specifics on affected products, vulnerable components, root cause, exploits, or fixes are included here. Monitor for updates from official advisories.

CVE-2020-0850

CVE-2020-0850 is a Microsoft Word remote code execution vulnerability. The issue arises when Word fails to correctly handle objects in memory, enabling an attacker to craft a file that, when opened by a user, could execute code in the current user’s security context. Exploitation would require th...

CVE-2022-22716

CVE-2022-22716 affects Microsoft Excel (part of Office) with an information-disclosure vulnerability. Publicly documented impact is disclosure of potentially sensitive information. Microsoft and third-party advisories reference Excel-specific fixes in February 2022 security updates (e.g., KB50021...

CVE-2012-0183

CVE-2012-0183 affects Microsoft Word 2003 SP3, Word 2007 SP2/SP3, Word 2008/2011 for Mac, and Office Compatibility Pack SP2/SP3. The vulnerability arises in parsing crafted RTF data, causing memory corruption that can allow remote code execution or denial of service. The issue is addressed by Mic...

CVE-2020-1226

CVE-2020-1225 and CVE-2020-1226 are documented as remote code execution vulnerabilities in Microsoft Excel (Office) arising from improper handling of objects in memory. The connected Nessus entry for Excel C2R (June 2020) references Excel products being affected by a security feature bypass vulne...

CVE-2025-21357

CVE-2025-21357 affects Microsoft Outlook and is a Remote Code Execution vulnerability in Outlook components. Public documents confirm Outlook is the affected product and that the root cause relates to a code execution path within Outlook, with several security updates released by Microsoft (e.g.,...

CVE-2025-27747

CVE-2025-27747 is a Use-After-Free vulnerability in Microsoft Word (Office) that can allow an attacker to execute arbitrary code. The CVE is documented as affecting Word with a local attack vector and high impact (execution of code, confidentiality/integrity/availability potentially impacted). Pu...

CVE-2017-8695

CVE-2017-8695 is an information-disclosure vulnerability in Windows Uniscribe where Microsoft’s Graphics Component can leak memory contents when handling objects, exploitable via a specially crafted document or an untrusted webpage. Affected products span Windows versions from Windows Server 2008...

CVE-2018-0793

CVE-2018-0793 is a remote code execution vulnerability in Microsoft Outlook (and related Office components) triggered by parsing email messages. The OpenVAS/macOS Nessus entries confirm the issue affecting Outlook parsing and the macOS Office stack, with unrelated Word updates listed in connected...

CVE-2021-1713

CVE-2021-1713 corresponds to a Microsoft Excel remote code execution vulnerability affecting Office/Excel products. The connected documents confirm multiple Office-related CVEs in January 2021 (CVE-2021-1713 among others) with Microsoft security updates issued in that period. The provided sources...

CVE-2025-26630

CVE-2025-26630 is a use-after-free vulnerability in Microsoft Office Access that can allow a local attacker to execute arbitrary code. The issue affects Microsoft Access/Office components and is rated CVSS v3.1 base score 7.8 (High) with Local attack vector, Privileges None, User Interaction requ...

CVE-2007-0671

CVE-2007-0671 is a remote-code-execution vulnerability in Microsoft Office Excel (affecting Excel 2000/XP/2003 and Mac equivalents) where a specially crafted Excel file can trigger arbitrary code execution. The vulnerability arises from improper handling/parsing of office records, enabling remote...

CVE-2019-1109

CVE-2019-1109 describes a spoofing vulnerability in Microsoft Office where Office JavaScript fails to validate the web page making a request to Office documents. An attacker could read or write information in Office documents. The fixed behavior is to correct how Microsoft Office JavaScript verif...

CVE-2009-2528

CVE-2009-2528 is a memory corruption vulnerability in GDI+ used by Microsoft Office XP/2000 when parsing Office Art Property Tables. A crafted Office document can trigger remote code execution. Microsoft Security Bulletin MS09-062 (KB957488) provides patches; apply the MS09-062 updates to remedia...

CVE-2011-1988

Microsoft Excel heap memory corruption vulnerability (MS11-072) tied to parsing BIFF2 records in Excel files can allow remote code execution. Affected products include Excel 2003 SP3, 2007 SP2, Office 2007 SP2, Office for Mac variants, Open XML Converter for Mac, Excel Viewer SP2, and related Mac...