Office@* Security Vulnerabilities and Issues — Page 2 of Office@* CVE List

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Memory Corruption Vulnerability'.

7.8CVSS7.8AI score0.16554EPSS

CVE•added 2024/11/12 6:15 p.m.•145 views

CVE-2024-49031

Microsoft Office Graphics Remote Code Execution Vulnerability

7.8CVSS7.9AI score0.00357EPSS

CVE•added 2020/06/09 8:15 p.m.•143 views

CVE-2020-1226

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.

9.3CVSS8.5AI score0.20625EPSS

CVE•added 2022/01/11 9:15 p.m.•143 views

CVE-2022-21841

Microsoft Excel Remote Code Execution Vulnerability

9.3CVSS8.2AI score0.01942EPSS

CVE•added 2023/01/10 10:15 p.m.•142 views

CVE-2023-21734

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00703EPSS

CVE•added 2021/05/11 7:15 p.m.•141 views

CVE-2021-31175

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.02965EPSS

CVE•added 2021/05/11 7:15 p.m.•140 views

CVE-2021-31180

Microsoft Office Graphics Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.03334EPSS

CVE•added 2023/08/08 6:15 p.m.•139 views

CVE-2023-35371

Microsoft Office Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00766EPSS

CVE•added 2019/07/29 2:8 p.m.•138 views

CVE-2019-1109

A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the vulnerabi...

9.1CVSS8.6AI score0.07967EPSS

CVE•added 2020/10/16 11:15 p.m.•138 views

CVE-2020-16955

<p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p><p>To exploit this vulnerability, an attacker would need to convince a user to op...

7.8CVSS7.4AI score0.08331EPSS

CVE•added 2019/09/11 10:15 p.m.•137 views

CVE-2019-1263

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.

5.5CVSS6AI score0.1377EPSS

CVE•added 2023/06/14 12:15 a.m.•135 views

CVE-2023-33133

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.14181EPSS

CVE•added 2024/07/09 5:15 p.m.•134 views

CVE-2024-38021

Microsoft Outlook Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.15704EPSS

CVE•added 2020/03/12 4:15 p.m.•133 views

CVE-2020-0850

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.

8.8CVSS7.9AI score0.33652EPSS

CVE•added 2024/07/09 5:15 p.m.•132 views

CVE-2024-38020

Microsoft Outlook Spoofing Vulnerability

6.5CVSS6.8AI score0.00661EPSS

CVE•added 2021/05/11 7:15 p.m.•130 views

CVE-2021-31178

Microsoft Office Information Disclosure Vulnerability

5.5CVSS6.1AI score0.14912EPSS

CVE•added 2022/02/09 5:15 p.m.•130 views

CVE-2022-22716

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS5.4AI score0.0158EPSS

CVE•added 2022/04/15 7:15 p.m.•130 views

CVE-2022-24473

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.01964EPSS

CVE•added 2020/07/14 11:15 p.m.•129 views

CVE-2020-1349

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.

7.8CVSS7.9AI score0.44783EPSS

CVE•added 2021/09/15 12:15 p.m.•129 views

CVE-2021-38658

Microsoft Office Graphics Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.05369EPSS

CVE•added 2024/10/08 6:15 p.m.•128 views

CVE-2024-43609

Microsoft Office Spoofing Vulnerability

6.5CVSS6.5AI score0.17296EPSS

CVE•added 2020/04/15 3:15 p.m.•125 views

CVE-2020-0906

9.3CVSS8.8AI score0.32912EPSS

CVE•added 2021/09/15 12:15 p.m.•121 views

CVE-2021-38650

Microsoft Office Spoofing Vulnerability

7.6CVSS7.3AI score0.00821EPSS

CVE•added 2023/03/14 5:15 p.m.•121 views

CVE-2023-23391

Office for Android Spoofing Vulnerability

5.5CVSS5.8AI score0.00216EPSS

CVE•added 2020/02/11 10:15 p.m.•120 views

CVE-2020-0759

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.32912EPSS

CVE•added 2020/03/12 4:15 p.m.•120 views

CVE-2020-0852

9.3CVSS8AI score0.33652EPSS

CVE•added 2020/04/15 3:15 p.m.•120 views

CVE-2020-0961

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.

9.3CVSS8.1AI score0.33652EPSS

CVE•added 2021/05/11 7:15 p.m.•120 views

CVE-2021-31174

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS6.1AI score0.00503EPSS

CVE•added 2019/05/16 7:29 p.m.•119 views

CVE-2019-0953

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.

9.3CVSS7.9AI score0.25636EPSS

CVE•added 2021/10/13 1:15 a.m.•119 views

CVE-2021-40471

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.02593EPSS

CVE•added 2021/10/13 1:15 a.m.•119 views

CVE-2021-40473

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.5AI score0.02593EPSS

CVE•added 2020/04/15 3:15 p.m.•118 views

CVE-2020-0980

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.

9.3CVSS8.3AI score0.33652EPSS

CVE•added 2018/09/13 12:29 a.m.•116 views

CVE-2018-8332

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows S...

9.3CVSS8.2AI score0.38097EPSS

CVE•added 2020/04/15 3:15 p.m.•116 views

CVE-2020-0991

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0760.

9.3CVSS8.4AI score0.34566EPSS

CVE•added 2021/10/13 1:15 a.m.•116 views

CVE-2021-40472

Microsoft Excel Information Disclosure Vulnerability

5.5CVSS5.9AI score0.00461EPSS

CVE•added 2022/11/09 10:15 p.m.•116 views

CVE-2022-41061

Microsoft Word Remote Code Execution Vulnerability

7.8CVSS7.8AI score0.00249EPSS

CVE•added 2021/10/13 1:15 a.m.•115 views

CVE-2021-40485

Microsoft Excel Remote Code Execution Vulnerability

7.8CVSS7.7AI score0.00865EPSS

CVE•added 2021/11/10 1:19 a.m.•115 views

CVE-2021-41368

Microsoft Access Remote Code Execution Vulnerability

7.8CVSS6.5AI score0.01032EPSS

CVE•added 2021/07/14 6:15 p.m.•114 views

CVE-2021-34469

Microsoft Office Security Feature Bypass Vulnerability

8.2CVSS7.8AI score0.00836EPSS

CVE•added 2018/10/10 1:29 p.m.•113 views

CVE-2018-8432

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel V...

9.3CVSS8.2AI score0.16307EPSS

CVE•added 2020/05/21 11:15 p.m.•113 views

CVE-2020-0901

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

9.8CVSS8.8AI score0.45859EPSS

CVE•added 2020/07/14 11:15 p.m.•113 views

CVE-2020-1342

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.

5.5CVSS6AI score0.28299EPSS

Total number of security vulnerabilities266