Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

17 records in Office Sharepoint Server · all components

Priority CRITICAL 93KEV

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel View…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.52845 Published 2009-06-10 No fix listed CWE-94
Priority MEDIUM 64

Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malf…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.3107 Published 2009-06-10 No fix listed CWE-94
Priority MEDIUM 63

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel View…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.27984 Published 2009-06-10 No fix listed CWE-399
Priority MEDIUM 63

Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.29444 Published 2009-06-10 No fix listed CWE-94
Priority MEDIUM 63

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Microsoft Office Excel Viewer 2003 SP3 allow remote attackers to execute a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28446 Published 2009-06-10 No fix listed CWE-94
Priority MEDIUM 63

Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.4791 Published 2008-12-10 No fix listed CWE-287
Priority MEDIUM 62

Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and S…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.25692 Published 2010-03-10 No fix listed CWE-94
Priority MEDIUM 60

Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a cr…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.23095 Published 2010-03-10 No fix listed CWE-119
Priority MEDIUM 60

Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.23095 Published 2010-03-10 No fix listed CWE-94
Priority MEDIUM 59

Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21221 Published 2010-03-10 No fix listed CWE-94
Priority MEDIUM 59

Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an un…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21256 Published 2010-03-10 No fix listed CWE-94
Priority MEDIUM 40

Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.2308 Published 2012-07-10 No fix listed CWE-79
Open these records in search →