Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

281 records in Office Online Server · all components

TI-2017-08774 CVE-2017-11826 · GHSA-4qcg-gx82-4h36

Memory corruption in Microsoft Office

Priority CRITICAL 93KEV

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.82217 Published 2017-10-13 No fix listed CWE-119
Priority CRITICAL 90

Microsoft Word Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.848 Published 2023-02-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.70.23021201 +4 CWE-190
Priority HIGH 70

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.51673 Published 2021-07-14 Fixed in https://aka.ms/OfficeSecurityReleases, 15.0.5363.1000 +3
Priority HIGH 68

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.53513 Published 2023-06-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.74.23061100 +3 CWE-125
Priority HIGH 65

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.44048 Published 2023-06-13 Fixed in https://aka.ms/OfficeSecurityReleases, 16.74.23061100 +3 CWE-122
TI-2018-00733 CVE-2018-0792 · GHSA-6wj9-4q9r-266c

Out-of-bounds write in Microsoft Word

Priority MEDIUM 61

Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability".

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.28338 Published 2018-01-10 No fix listed CWE-787
Priority MEDIUM 56

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03968 Published 2019-08-14 Fixed in publication, https://aka.ms/OfficeSecurityReleases
Priority MEDIUM 56

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoin…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.26291 Published 2016-07-13 No fix listed CWE-119
TI-2018-00738 CVE-2018-0797 · GHSA-f2vj-ccgm-xw84

Out-of-bounds write in Microsoft Office

Priority MEDIUM 55

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.24662 Published 2018-01-10 No fix listed CWE-787
TI-2017-06257 CVE-2017-8743 · GHSA-m674-4xwc-r94v

Memory corruption in Microsoft Office

Priority MEDIUM 54

A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.22123 Published 2017-09-13 No fix listed CWE-119
Priority MEDIUM 53

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19867 Published 2016-09-14 No fix listed CWE-119
TI-2018-00857 CVE-2018-0922 · GHSA-6v4p-rx2q-99q9

Out-of-bounds write in Microsoft Office

Priority MEDIUM 52

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17959 Published 2018-03-14 No fix listed CWE-787
Priority MEDIUM 52

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on Sh…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.18434 Published 2016-09-14 No fix listed CWE-119
Priority MEDIUM 51

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17466 Published 2016-09-14 No fix listed CWE-119
Priority MEDIUM 51

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoin…

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.16722 Published 2016-06-16 No fix listed CWE-20
Load more
Open these records in search →