Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV
TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-73128 Microsoft Windows Command Injection Vulnerability Priority CRITICAL 97KEV 2026-10-13TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability Priority CRITICAL 97KEV 2026-09-25TI-2026-56567 Microsoft Windows Link Following Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2026-09-08TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

25 records in Excel For Mac · all components

TI-2015-05155 CVE-2015-6094 · GHSA-5532-3q62-w89j

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac…

Priority MEDIUM 59

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a cra…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20568 Published 2015-11-11 No fix listed CWE-119
TI-2016-06217 CVE-2016-7228 · GHSA-p358-69gx-jf46

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016…

Priority MEDIUM 57

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a cr…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.28282 Published 2016-11-10 No fix listed CWE-119
TI-2016-00029 CVE-2016-0035 · GHSA-h7f2-537x-36xg

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016…

Priority MEDIUM 56

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.22162 Published 2016-01-13 No fix listed CWE-119
TI-2016-00008 CVE-2016-0010 · GHSA-3m2q-3xcm-4xxf

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office…

Priority MEDIUM 55

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac, PowerPoint 2016 for Mac, Word 2016 for Mac…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.21102 Published 2016-01-13 No fix listed CWE-119
TI-2015-05177 CVE-2015-6122 · GHSA-5m6p-xwjc-mqmg

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack…

Priority MEDIUM 55

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory C…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.13601 Published 2015-12-09 No fix listed CWE-119
TI-2015-05109 CVE-2015-6040 · GHSA-vrqv-q52f-5hcq

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office…

Priority MEDIUM 55

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Micro…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.13601 Published 2015-12-09 No fix listed CWE-119
TI-2017-06100 CVE-2017-8567 · GHSA-8jgp-gj7v-chvx

Memory corruption in Microsoft Office

Priority MEDIUM 53

A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution".

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.20335 Published 2017-09-13 No fix listed CWE-119
TI-2016-06225 CVE-2016-7236 · GHSA-6p7p-m68f-56wp

Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on…

Priority MEDIUM 53

Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Mem…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.20717 Published 2016-11-10 No fix listed CWE-119
TI-2016-06218 CVE-2016-7229 · GHSA-2gcx-5wj8-xv2j

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016…

Priority MEDIUM 52

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19282 Published 2016-11-10 No fix listed CWE-119
TI-2016-06202 CVE-2016-7213 · GHSA-7wv4-jmc4-pc25

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016…

Priority MEDIUM 52

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a cr…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19282 Published 2016-11-10 No fix listed CWE-119
TI-2016-02825 CVE-2016-3358 · GHSA-87pf-j2gx-jjvx

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016…

Priority MEDIUM 52

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on Sh…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.18434 Published 2016-09-14 No fix listed CWE-119
TI-2016-02760 CVE-2016-3284 · GHSA-cfrg-jfpg-wfq6

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016…

Priority MEDIUM 52

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19641 Published 2016-07-13 No fix listed CWE-119
TI-2017-06156 CVE-2017-8632 · GHSA-27j6-vgrr-h838

Memory corruption in Microsoft Office

Priority MEDIUM 51

A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Micr…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17652 Published 2017-09-13 No fix listed CWE-119
TI-2016-06222 CVE-2016-7233 · GHSA-44c7-327r-j4x7

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac…

Priority MEDIUM 49

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2013 SP1, and Office Web Apps 2010 SP2…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.22384 Published 2016-11-10 No fix listed CWE-200
Open these records in search →