Priority CRITICAL 100KEV
Microsoft Outlook Remote Code Execution Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.9466 · Published 2024-02-13 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5435.1001 CWE-20
Priority CRITICAL 97KEV
Microsoft Project Remote Code Execution Vulnerability
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.08194 · Published 2024-08-13 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5461.1001 CWE-20
Priority CRITICAL 97KEV
Microsoft Outlook Security Feature Bypass Vulnerability
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.15522 · Published 2023-07-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5404.1000 +1 CWE-367
Priority CRITICAL 93KEV
Microsoft Excel Security Feature Bypass Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.43005 · Published 2021-11-10 · Fixed in https://aka.ms/OfficeSecurityReleases, 15.0.5397.1001 +2
Priority CRITICAL 93KEV
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.07987 · Published 2021-09-15 · Fixed in https://aka.ms/OfficeSecurityReleases, 5381.1000 +1
Priority CRITICAL 91KEV
Microsoft Publisher Security Feature Bypass Vulnerability
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.02667 · Published 2024-09-10 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5465.1001 CWE-693
Priority MEDIUM 51
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00974 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 48
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 45
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00373 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-122
Priority MEDIUM 43
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01288 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-502
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-415
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1002 +4 CWE-122
Priority MEDIUM 42
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority MEDIUM 42
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1000 +4 CWE-787
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-908
Priority MEDIUM 42
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00859 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1003 +4 CWE-125
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority MEDIUM 42
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.5569.1002 +4 CWE-122
Priority MEDIUM 42
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-122
Priority MEDIUM 42
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +3 CWE-416
Priority MEDIUM 42
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-121
Load more