Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Infopath · all components

Priority CRITICAL 97KEV

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrat…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.44099 Published 2007-02-03 No fix listed
Priority HIGH 71

Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM fiel…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.49024 Published 2004-09-17 No fix listed
Priority MEDIUM 57

Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, E…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.1653 Published 2015-11-11 No fix listed CWE-264
Priority MEDIUM 45

Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Wi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.34278 Published 2012-10-09 No fix listed CWE-79
Priority LOW 36

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web scrip…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.15432 Published 2013-04-09 No fix listed CWE-79
Open these records in search →