Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

42 records in Office Word Viewer · all components

TI-2019-00335 CVE-2019-0541 · GHSA-f832-7fhg-m78h

Command injection in Microsoft Office

Priority CRITICAL 97KEV

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Vie…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.53202 Published 2019-01-08 No fix listed CWE-77
TI-2017-08774 CVE-2017-11826 · GHSA-4qcg-gx82-4h36

Memory corruption in Microsoft Office

Priority CRITICAL 93KEV

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.82217 Published 2017-10-13 No fix listed CWE-119
Priority CRITICAL 93KEV

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (mem…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.53033 Published 2012-12-12 No fix listed CWE-787
Priority CRITICAL 93KEV

Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Micros…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.59634 Published 2009-06-10 No fix listed CWE-787
Priority HIGH 69

Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.49765 Published 2017-09-13 No fix listed CWE-20
Priority HIGH 68

Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.40503 Published 2009-06-10 No fix listed CWE-119
Priority HIGH 65

Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.33906 Published 2008-12-10 No fix listed CWE-399
Priority HIGH 65

Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.32943 Published 2008-12-10 No fix listed CWE-119
Priority MEDIUM 63

Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypas…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28876 Published 2008-12-10 No fix listed CWE-94
Priority MEDIUM 62

Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office W…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.26715 Published 2009-10-14 No fix listed CWE-119
Priority MEDIUM 60

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.2339 Published 2008-12-10 No fix listed CWE-399
Priority MEDIUM 60

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold an…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.2339 Published 2008-12-10 No fix listed CWE-399
Priority MEDIUM 59

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corrupt…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20452 Published 2009-10-14 No fix listed CWE-94
Priority MEDIUM 59

Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20982 Published 2009-10-14 No fix listed CWE-189
Load more
Open these records in search →