CVE-2007-0671

CVE-2007-0671 is a remote-code-execution vulnerability in Microsoft Office Excel (affecting Excel 2000/XP/2003 and Mac equivalents) where a specially crafted Excel file can trigger arbitrary code execution. The vulnerability arises from improper handling/parsing of office records, enabling remote...

CVE-2009-3126

CVE-2009-3126 corresponds to the GDI+ PNG Integer Overflow vulnerability described in MS09-062. The issue arises from an integer overflow in GDI+ when processing PNG images, which could allow remote code execution if a user opens a specially crafted image. The vulnerability affects a wide range o...

CVE-2012-0141

CVE-2012-0141 affects Microsoft Excel and related Office components across Windows and Mac platforms (Excel 2003 SP3, 2007 SP2/SP3, 2010 SP1/Gold, Office 2011 for Mac, Excel Viewer, Office Compatibility Pack). The root cause is memory corruption during parsing/opening specially crafted Excel/RTF ...

CVE-2019-1109

CVE-2019-1109 describes a spoofing vulnerability in Microsoft Office where Office JavaScript fails to validate the web page making a request to Office documents. An attacker could read or write information in Office documents. The fixed behavior is to correct how Microsoft Office JavaScript verif...

CVE-2020-1349

CVE-2020-1349 is an Outlook remote code execution vulnerability. It arises from improper handling of objects in memory, enabling code execution with the caller’s privileges when a user opens a specially crafted file or views content via Preview Pane. Public documentation notes that an attacker co...

CVE-2020-1583

CVE-2020-1583 is a Microsoft Word information-disclosure vulnerability. An attacker could craft a document to cause Word to inappropriately disclose memory contents, enabling data compromise if the memory location of created objects is known. The vulnerability is triggered by memory handling of W...

CVE-2021-38658

CVE-2021-38658 is a Microsoft Office graphics remote code execution vulnerability. Public docs confirm a graphics-rendering flaw that can execute arbitrary code when processing crafted graphics, with an impact on confidentiality, integrity, and availability. The issue is mitigated by applying Off...

CVE-2024-38169

CVE-2024-38169 is a Microsoft Office Visio remote code execution vulnerability. Reports confirm impact on Office Visio components and related Office products, with public exploitation available for this family of CVEs (Kaspersky notes exploitation for multiple Office vulnerabilities, including CV...

CVE-2009-0238

CVE-2009-0238 corresponds to a remote code execution vulnerability in Microsoft Office Excel and related components (Excel Viewer, Compatibility Pack, and Mac variants) triggered by opening a crafted Excel document that causes an invalid object access. The issue manifests as memory/code execution...

CVE-2012-2543

CVE-2012-2543 is a stack-based buffer overflow in Microsoft Excel components (Windows: Excel 2007 SP2/SP3, Excel 2010 SP1; Mac: Office 2011; Excel Viewer; Office Compatibility Pack SP2/SP3). The vulnerability arises while handling crafted spreadsheets, enabling remote code execution. Connected so...

CVE-2019-1263

CVE-2019-1263 — Microsoft Excel Information Disclosure . The connected Nessus/Office update docs confirm an information disclosure in Excel where memory contents may be exposed. The vulnerability is tied to Excel's handling of in-memory objects, enabling potential leakage of sensitive data. The O...

CVE-2020-1496

CVE-2020-1496 is a Microsoft Excel remote code execution vulnerability where the app fails to properly handle objects in memory. The issue allows an attacker to run arbitrary code in the context of the current user, with higher impact if the user has administrative rights. Exploitation requires a...

CVE-2023-35372

CVE-2023-35372 : Microsoft Office Visio remote code execution vulnerability. Multiple connected sources confirm an RCE in Microsoft Visio, with exploitability tied to Visio components used to draw diagrams. The primary remediation is Microsoft security updates published for Visio (e.g., KB5002565...

CVE-2008-1434

CVE-2008-1434 describes a remote code execution vulnerability in Microsoft Word caused by a memory handling error when processing a Word file containing a malformed CSS value. The issue affects Word across multiple products/versions (Office 2000 SP3, Word 2000; Word XP SP3; Word 2003 SP2/SP3; Wor...

CVE-2011-0097

CVE-2011-0097 is a Microsoft Excel integer-overflow in the 400h substream parsing that can trigger a stack-based buffer overflow and remote code execution. Affected are Excel on Windows (2002 SP3/2003 SP3/2007 SP2/2010) and Mac variants, plus related File Format converters/viewers. The vulnerabil...

CVE-2019-1461

CVE-2019-1461 is a denial-of-service vulnerability in Microsoft Word where the program fails to properly handle objects in memory. An attacker can trigger a remote DoS by sending a specially crafted document that, when opened, crashes Word or makes the system unavailable. The vulnerability has ne...

CVE-2021-40471

CVE-2021-40471 corresponds to a Microsoft Excel remote code execution vulnerability. The connected data confirms it affects Excel across Office versions and is addressed by security updates KB5001982 (Office 2016) and KB5001985 (Office 2013); other related Office CVEs are referenced in the same a...

CVE-2023-36569

CVE-2023-36569 is a Microsoft Office elevation-of-privilege vulnerability. Connected sources confirm the issue affects Microsoft Office products and assign a high CVSS v3.1 base score (8.4) with local attack vector, no user interaction, and privilege escalation affecting confidentiality, integrit...

CVE-2018-8332

CVE-2018-8332 is a remote code execution vulnerability in the Windows font library (Win32k) where specially crafted embedded fonts are mishandled. It affects a broad set of Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server equivalents listed in the initial entry), as well...

CVE-2020-1493

CVE-2020-1493 describes an information-disclosure flaw in Microsoft Outlook where attaching a file as a link can cause the attachment to be accessible to unauthorized recipients when emails are shared. The root cause is how Outlook handles attachment links, enabling exposure beyond the intended p...

CVE-2021-34478

CVE-2021-34478 is a Microsoft Office remote code execution vulnerability affecting Office/Word products (including Office 365 Click‑to‑Run). The trusted documents indicate a remote code execution risk requiring local access with user interaction (UI: REQUIRED) and provide high impact to confident...

CVE-2024-30042

CVE-2024-30042 affects Microsoft Excel (Office suite). The vulnerability enables remote code execution via a crafted file, with a local attack vector and requires user interaction. The CVSS v3.1 base score is 7.8 (HIGH), with confidentiality, integrity, and availability impacts all high; attack v...

CVE-2025-21338

CVE-2025-21338 is a GDI+ Remote Code Execution vulnerability. The CVE affects Windows components that use GDI+ and has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, no user interaction, and impacts to confidentiality, integrity, and availability as describ...

CVE-2020-16955

CVE-2020-16955 is an elevation-of-privilege vulnerability in Microsoft Office Click-to-Run (C2R) AppVLP, caused by how C2R handles certain files. An attacker could exploit this by convincing a user to open a specially crafted file to gain higher privileges. The vulnerability affects Microsoft Off...

CVE-2021-31178

CVE-2021-31178 is described in the connected documents as an information-disclosure vulnerability in Microsoft Office. The Nessus/OpenVAS entries reference this CVE as part of the Office May 2021 vulnerability set and note affected products (Office/Excel) and the need for security updates, listin...

CVE-2021-38650

CVE-2021-38650 is a Microsoft Office spoofing vulnerability. The connected sources specify an Office spoofing issue in Office components that could lead to actions performed under another user’s context, with exploitation requiring user interaction. Microsoft security updates (KB4484103 for Offic...

CVE-2023-33150

CVE-2023-33150 is a Microsoft Office/security feature bypass vulnerability affecting Word components. OpenVAS/NVD entries describe a high-severity issue (CVSSv3.1: 9.6) with network access, no privileges, user interaction required, and high impacts to confidentiality, integrity, and availability....

CVE-2012-1885

CVE-2012-1885 is a heap-based buffer overflow in Microsoft Excel components that affects Excel 2003 SP3, 2007 SP2/SP3, 2010 SP1, Office for Mac 2008/2011, and Office Compatibility Pack SP2/SP3. The root cause is a SerAuxErrBar heap overflow triggered by processing a crafted spreadsheet, enabling ...

CVE-2019-1205

CVE-2019-1205 is a remote code execution flaw in Microsoft Word caused by improper handling of in‑memory objects. An attacker can deliver a specially crafted Word file via email or a compromised website to run code in the current user’s security context, requiring user interaction to open the fil...

CVE-2023-33146

CVE-2023-33146 is a Microsoft Office remote code execution vulnerability documented in multiple feeds. The provided data confirms Microsoft Office is affected; the CVSSv3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates a high-severity issue requiring local access and user interaction. Se...

CVE-2025-29816

CVE-2025-29816 is a Microsoft Word security feature bypass vulnerability in Office Word. The available details show improper input validation in Word that allows an unauthenticated attacker to bypass a security feature over a network, effectively bypassing protections. The CVSS data (AV:N/AC:H/PR...

CVE-2009-3130

CVE-2009-3130 corresponds to the Excel Document Parsing Heap Overflow vulnerability. Affected software includes Microsoft Office Excel 2002 SP3, Excel 2003 and newer on Windows via BIFF parsing, and Office for Mac variants plus the Open XML File Format Converter for Mac. The root cause is imprope...

CVE-2013-0006

CVE-2013-0006 is associated with OSIsoft PI Interface for OPC XML-DA (ICS advisory ICSA-20-315-01) and Microsoft MSXML/MS13-002 context. Connected documents identify the affected product as PI Interface for OPC XML-DA versions prior to 1.7.3.x, where the vulnerability stems from numeric errors/st...

CVE-2020-1563

CVE-2020-1563 affects Microsoft Office; root cause is improper handling of objects in memory, enabling remote code execution when a user opens a crafted file. Impact can be full system compromise if the user has admin rights; requires user interaction. Security update fixes how Office handles mem...

CVE-2011-1983

The CVE-2011-1983 vulnerability is a Word use-after-free in Microsoft Office Word 2007/2010 (including SP2/SP3, Gold SP1) and Word for Mac 2011. The flaw occurs when Word handles a border object with a specific property, freeing memory during parsing, which can lead to remote code execution under...

CVE-2016-0145

CVE-2016-0145 is a Graphics Memory Corruption vulnerability in the Windows font library. A remote attacker can execute arbitrary code by delivering a crafted embedded font, affecting Windows flavors listed in the vulnerability entry (e.g., Windows Vista through Windows 10 versions, Windows Server...

CVE-2020-0906

Microsoft Excel contains a remote code execution vulnerability (CVE-2020-0906) where the application fails to properly handle objects in memory, allowing code to run in the attacker’s context. The Nessus updates describe Excel-specific RCEs and note that Office products were missing updates as of...

CVE-2022-37962

CVE-2022-37962 is a Microsoft PowerPoint remote code execution vulnerability. External references in the dossier show it as affecting PowerPoint/Office products with a CVSS v3.1 base score of 7.8 (High) and a CVSS vector of AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is described in mu...

CVE-2023-36865

CVE-2023-36865 affects Microsoft Office Visio and is described by ENISA/NCSC as a remote code execution issue with the potential to execute arbitrary code. The linked NCSC advisory lists CVE-2023-36865 under Microsoft Office Visio with a CVSS score of 7.8 (high) and impact of executing random cod...

CVE-2017-8676

CVE-2017-8676 is an information disclosure vulnerability in the Windows GDI+ component. The NVD entry describes that an authenticated attacker can retrieve information from the targeted system by presenting a specially crafted application, affecting a wide range of Windows versions (Windows clien...

CVE-2021-34469

CVE-2021-34469 is a Microsoft Office security feature bypass vulnerability. The NVD entry and connected sources confirm it affects Microsoft Office components and is classified as a security feature bypass with high impact (CVSS 3.1: 8.1 base, Network, Low attack complexity, No privileges require...

CVE-2026-32190

CVE-2026-32190 is a local-use-after-free vulnerability in Microsoft Office that could allow an attacker to execute arbitrary code on affected systems. The issue is described as a use-after-free in Microsoft Office that permits a local attacker to run code, with CVSS v3.1 metrics indicating Local,...

CVE-2022-41061

CVE-2022-41061 is a Microsoft Word remote code execution vulnerability. The CVSS v3.1 base score is 7.8 (HIGH), with LOCAL attack vector, LOW attack complexity, and user interaction required; impact is high for confidentiality, integrity, and availability. Affected: Microsoft Word / Office compon...

CVE-2023-35636

CVE-2023-35636 is an information-disclosure vulnerability in Microsoft Outlook. The issue involves the calendar sharing feature where sending a crafted email with two headers could cause Outlook to disclose data, including NTLMv2 password hashes, to an attacker-controlled responder. Public detail...

CVE-2026-40358

CVE-2026-40358 affects Microsoft Office (Office 2016) and is caused by a use-after-free in Office components, enabling local code execution with high impact. The CVSS v3.1 metrics indicate LOCAL attack vector, LOW attack complexity, NONE privileges required, NO user interaction, and HIGH confiden...

CVE-2020-0961

Summary (supported by provided documents): CVE-2020-0961 is a remote code execution vulnerability in the Microsoft Office Access Connectivity Engine that occurs when the engine improperly handles memory objects. The Nessus plugin for Office C2R April 2020 explicitly lists CVE-2020-0961 among mult...

CVE-2020-1494

CVE-2020-1494 details (Excel RCE): Microsoft Excel contains a remote code execution vulnerability due to improper handling of in-memory objects. An attacker can run arbitrary code in the context of the current user, potentially taking control of the system if the user has administrative rights. E...

CVE-2020-17119

CVE-2020-17119 is an Outlook information-disclosure vulnerability that is referenced across multiple feeds as part of the Microsoft Office updates for macOS (December 2020). The initial entry identifies Outlook Information Disclosure as the issue, while connected documents confirm the CVE is bund...

CVE-2021-28454

CVE-2021-28454 = Microsoft Excel Remote Code Execution Vulnerability in Office suites. Root cause described as a vulnerability in Excel that allows code execution with the privileges of the logged-in user (UI: REQUIRED, vector: LOCAL). Affected products include various Office versions that includ...

CVE-2017-0073

Technical details for CVE-2017-0073 are not publicly available in the provided connected documents. The records summarize the vulnerability, but no product/version specifics or exploit information are shown. Monitor for updates from official sources.