Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

62 records in Office Web Apps Server · all components

TI-2017-08774 CVE-2017-11826 · GHSA-4qcg-gx82-4h36

Memory corruption in Microsoft Office

CRITICAL 93KEV

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.82217 Published 2017-10-13 No fix listed CWE-119

TI-2014-01372 CVE-2014-1761 · GHSA-f32r-xw6q-p85m

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer…

CRITICAL 93KEV

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.77734 Published 2014-03-24 No fix listed CWE-787

TI-2016-02824 CVE-2016-3357 · GHSA-3jv4-wff7-5wvx

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office…

HIGH 69

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.54809 Published 2016-09-14 No fix listed CWE-119

TI-2015-05154 CVE-2015-6093 · GHSA-v28g-cwg8-jqvp

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office…

MEDIUM 62

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.23203 Published 2015-11-11 No fix listed CWE-119

TI-2017-06048 CVE-2017-8512 · GHSA-xqvh-h263-wrrc

A remote code execution vulnerability exists in Microsoft Office when the software fails…

MEDIUM 60

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.22127 Published 2017-06-15 No fix listed

TI-2015-00077 CVE-2015-0085 · GHSA-p6v9-v6m6-gqv6

Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint…

MEDIUM 60

Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 Gold and SP1, Word 2013 Gold…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.18745 Published 2015-03-11 No fix listed

TI-2015-01506 CVE-2015-1682 · GHSA-h4r2-qqhp-vxq5

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office…

MEDIUM 59

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013 RT SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20398 Published 2015-05-13 No fix listed CWE-119

TI-2019-00377 CVE-2019-0585 · GHSA-vwm3-pch6-j453

A remote code execution vulnerability exists in Microsoft Word software when it fails to…

MEDIUM 58

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, M…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.21967 Published 2019-01-08 No fix listed

TI-2017-06045 CVE-2017-8509 · GHSA-7q45-gm3c-7wcj

A remote code execution vulnerability exists in Microsoft Office when the software fails…

MEDIUM 58

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.18238 Published 2017-06-15 No fix listed

TI-2014-00251 CVE-2014-0260 · GHSA-jcxw-cj2x-37wj

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office…

MEDIUM 57

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Serve…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.17827 Published 2014-01-15 No fix listed CWE-119

TI-2016-02758 CVE-2016-3282 · GHSA-89gf-qwvc-7g2j

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1…

MEDIUM 56

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoin…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.26291 Published 2016-07-13 No fix listed CWE-119

TI-2015-00078 CVE-2015-0086 · GHSA-g663-jhxc-xx43

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word…

MEDIUM 56

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automat…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.14943 Published 2015-03-11 No fix listed CWE-399

TI-2018-00738 CVE-2018-0797 · GHSA-f2vj-ccgm-xw84

Out-of-bounds write in Microsoft Office

MEDIUM 55

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.24662 Published 2018-01-10 No fix listed CWE-787

TI-2017-06256 CVE-2017-8742 · GHSA-x9cj-35rq-fj52

Memory corruption in Microsoft Office

MEDIUM 54

A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, M…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.22123 Published 2017-09-13 No fix listed CWE-119

TI-2016-00112 CVE-2016-0134 · GHSA-98j4-m8x2-4x92

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1…

MEDIUM 54

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.22285 Published 2016-03-09 No fix listed CWE-119

TI-2014-00243 CVE-2014-0251 · GHSA-hcw7-j5pr-h3vx

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and…

MEDIUM 54

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 G…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.14214 Published 2014-05-14 No fix listed CWE-94

TI-2017-06047 CVE-2017-8511 · GHSA-qwph-q65f-w8rg

A remote code execution vulnerability exists in Microsoft Office when the software fails…

MEDIUM 53

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.20612 Published 2017-06-15 No fix listed

TI-2016-00106 CVE-2016-0127 · GHSA-6929-52rx-5h8x

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1…

MEDIUM 53

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on Sh…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.21137 Published 2016-04-12 No fix listed CWE-119

TI-2018-06232 CVE-2018-8577 · GHSA-wwq4-883j-hr97

A remote code execution vulnerability exists in Microsoft Excel software when the…

MEDIUM 52

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Off…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19059 Published 2018-11-14 No fix listed

TI-2016-00045 CVE-2016-0053 · GHSA-x478-wm9f-48j7

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1…

MEDIUM 52

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Ser…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19081 Published 2016-02-10 No fix listed CWE-119

TI-2016-00044 CVE-2016-0052 · GHSA-g6qv-6q45-8qrm

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1…

MEDIUM 52

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19081 Published 2016-02-10 No fix listed CWE-119

TI-2016-00018 CVE-2016-0022 · GHSA-vjhm-6h5w-ff3p

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1…

MEDIUM 52

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19081 Published 2016-02-10 No fix listed CWE-119

TI-2016-02827 CVE-2016-3360 · GHSA-vqrv-x3p6-36rh

Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013…

MEDIUM 51

Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1, Office Web Apps 2010…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17235 Published 2016-09-14 No fix listed CWE-119

TI-2016-00020 CVE-2016-0025 · GHSA-rvx2-p94r-g3j6

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1…

MEDIUM 51

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoin…

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.16722 Published 2016-06-16 No fix listed CWE-20

TI-2021-11926 CVE-2021-31939 · GHSA-3w8p-33h3-h7v6

Microsoft Excel Remote Code Execution Vulnerability

MEDIUM 49

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.13337 Published 2021-06-08 Fixed in 16.0.10375.20000, https://aka.ms/OfficeSecurityReleases +2

Open these records in search →

Critical	2330
High	10410
Medium	5035
Low	270
No CVSS	1