Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

81 records in Open Xml File Format Converter · all components

Priority CRITICAL 93KEV

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.89389 Published 2010-11-10 No fix listed CWE-787
Priority CRITICAL 93KEV

Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibili…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.84034 Published 2009-11-11 No fix listed CWE-787
Priority CRITICAL 93KEV

Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Micros…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.59634 Published 2009-06-10 No fix listed CWE-787
Priority CRITICAL 93KEV

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel View…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.52845 Published 2009-06-10 No fix listed CWE-94
Priority HIGH 77

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer ov…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.70166 Published 2011-04-13 No fix listed CWE-119
Priority HIGH 77

Stack-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file wit…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.70121 Published 2010-06-08 No fix listed CWE-94
Priority HIGH 72

Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 200…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.52318 Published 2008-10-15 No fix listed CWE-787
Priority HIGH 68

Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.40503 Published 2009-06-10 No fix listed CWE-119
Priority HIGH 65

Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.33906 Published 2008-12-10 No fix listed CWE-399
Priority HIGH 65

Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.32943 Published 2008-12-10 No fix listed CWE-119
Priority HIGH 65

Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and Powe…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.34415 Published 2008-10-15 No fix listed CWE-190
Priority MEDIUM 64

Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.30499 Published 2011-04-13 No fix listed CWE-189
Priority MEDIUM 64

Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and Powe…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.31553 Published 2011-04-13 No fix listed CWE-189
Priority MEDIUM 64

Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malf…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.3107 Published 2009-06-10 No fix listed CWE-94
Priority MEDIUM 64

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML File Format Converter fo…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.30077 Published 2009-05-12 No fix listed CWE-94
Priority MEDIUM 63

Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28222 Published 2011-06-16 No fix listed CWE-119
Priority MEDIUM 63

Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; P…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.29604 Published 2011-04-13 No fix listed CWE-20
Load more
Open these records in search →