Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

84 records in Office 365 Proplus · all components

TI-2019-00335 CVE-2019-0541 · GHSA-f832-7fhg-m78h

Command injection in Microsoft Office

Priority CRITICAL 97KEV

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Vie…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.53202 Published 2019-01-08 No fix listed CWE-77
Priority MEDIUM 57

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Offic…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.20457 Published 2018-10-10 No fix listed
Priority MEDIUM 56

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03968 Published 2019-08-14 Fixed in publication, https://aka.ms/OfficeSecurityReleases
TI-2020-00627 CVE-2020-0652 · GHSA-66vw-cj4r-f5fq

Out-of-bounds write in Microsoft Office

Priority MEDIUM 52

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Memory Corruption Vulnerability'.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.1821 Published 2020-01-14 No fix listed CWE-787
Priority MEDIUM 52

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.18414 Published 2019-03-06 No fix listed
Priority MEDIUM 52

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Off…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19059 Published 2018-11-14 No fix listed
Load more
Open these records in search →