Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

106 records in Office Web Apps · all components

TI-2015-01471 CVE-2015-1641 · GHSA-7p4q-fv59-h67q

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1…

CRITICAL 93KEV

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.97246 Published 2015-04-14 No fix listed CWE-787

TI-2014-01372 CVE-2014-1761 · GHSA-f32r-xw6q-p85m

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer…

CRITICAL 93KEV

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.77734 Published 2014-03-24 No fix listed CWE-787

TI-2012-02207 CVE-2012-2539 · GHSA-x5wq-5f2r-gxw5

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office…

CRITICAL 93KEV

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (mem…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.53033 Published 2012-12-12 No fix listed CWE-787

TI-2023-08100 CVE-2023-21716 · GHSA-64mm-8wcm-jw5g

Microsoft Word Remote Code Execution Vulnerability

CRITICAL 90

Microsoft Word Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.848 Published 2023-02-14 Fixed in https://aka.ms/OfficeSecurityReleases, 16.70.23021201 +4 CWE-190

TI-2016-02824 CVE-2016-3357 · GHSA-3jv4-wff7-5wvx

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office…

HIGH 69

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.54809 Published 2016-09-14 No fix listed CWE-119

TI-2013-01166 CVE-2013-1330 · GHSA-hcc7-7rjj-r32g

The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint…

HIGH 66

The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewStateMac attribute, which allows remote attac…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.30202 Published 2013-09-11 No fix listed CWE-20

TI-2015-01480 CVE-2015-1650 · GHSA-999c-xc55-3f6v

Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2…

MEDIUM 63

Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28839 Published 2015-04-14 No fix listed

TI-2013-01152 CVE-2013-1315 · GHSA-4hhx-gmqj-x5qp

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010…

MEDIUM 63

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28867 Published 2013-09-11 No fix listed CWE-119

TI-2015-05154 CVE-2015-6093 · GHSA-v28g-cwg8-jqvp

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office…

MEDIUM 62

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.23203 Published 2015-11-11 No fix listed CWE-119

TI-2013-03395 CVE-2013-3889 · GHSA-qfg6-4gxh-j3wv

Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1…

MEDIUM 62

Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automatio…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.27399 Published 2013-10-09 No fix listed CWE-119

TI-2015-01479 CVE-2015-1649 · GHSA-29q7-v5hv-33hm

Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2…

MEDIUM 61

Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps Server 2010…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.25575 Published 2015-04-14 No fix listed

TI-2010-03073 CVE-2010-3214 · GHSA-6qr6-mgvw-vh8f

Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010…

MEDIUM 61

Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 F…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.24356 Published 2010-10-13 No fix listed CWE-119

TI-2017-06048 CVE-2017-8512 · GHSA-xqvh-h263-wrrc

A remote code execution vulnerability exists in Microsoft Office when the software fails…

MEDIUM 60

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.22127 Published 2017-06-15 No fix listed

TI-2012-02201 CVE-2012-2528 · GHSA-gh9p-wvxj-wc5x

Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1…

MEDIUM 60

Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft SharePoint Server 2010; and Office Web Ap…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.22117 Published 2012-10-09 No fix listed CWE-399

TI-2013-03368 CVE-2013-3858 · GHSA-j3mp-2pvg-r8rg

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1…

MEDIUM 59

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote at…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21033 Published 2013-09-11 No fix listed CWE-119

TI-2013-03367 CVE-2013-3857 · GHSA-mmfx-p324-m9qv

Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App…

MEDIUM 59

Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1 and SP2, Office Compatibility Pack SP3, and Wor…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21033 Published 2013-09-11 No fix listed CWE-119

TI-2013-03359 CVE-2013-3849 · GHSA-qf89-ghj8-fvxx

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1…

MEDIUM 59

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21033 Published 2013-09-11 No fix listed CWE-119

TI-2013-03358 CVE-2013-3848 · GHSA-phqv-84wv-vvmr

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1…

MEDIUM 59

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.21139 Published 2013-09-11 No fix listed CWE-119

TI-2013-03357 CVE-2013-3847 · GHSA-5q76-mqhx-jj3x

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1…

MEDIUM 59

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20971 Published 2013-09-11 No fix listed CWE-119

TI-2017-06045 CVE-2017-8509 · GHSA-7q45-gm3c-7wcj

A remote code execution vulnerability exists in Microsoft Office when the software fails…

MEDIUM 58

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.18238 Published 2017-06-15 No fix listed

TI-2018-06179 CVE-2018-8504 · GHSA-cr8x-g9hm-h8c5

A remote code execution vulnerability exists in Microsoft Word software when the software…

MEDIUM 57

A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microso…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.19707 Published 2018-10-10 No fix listed

TI-2017-00029 CVE-2017-0030 · GHSA-qc9j-5cxx-mmg3

Memory corruption in Microsoft Office

MEDIUM 57

Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitr…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.2779 Published 2017-03-17 No fix listed CWE-119

TI-2014-00251 CVE-2014-0260 · GHSA-jcxw-cj2x-37wj

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office…

MEDIUM 57

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Serve…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.17827 Published 2014-01-15 No fix listed CWE-119

TI-2018-00951 CVE-2018-1028 · GHSA-87hq-2c3x-p62g

Code injection in Microsoft Word

MEDIUM 56

A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word,…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.18919 Published 2018-04-12 No fix listed CWE-94

TI-2016-02758 CVE-2016-3282 · GHSA-89gf-qwvc-7g2j

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1…

MEDIUM 56

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoin…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.26291 Published 2016-07-13 No fix listed CWE-119

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1