Priority CRITICAL 97KEV
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.95121 · Published 2018-01-10 · No fix listed CWE-787
Priority CRITICAL 97KEV
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of servi…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.40124 · Published 2015-07-14 · No fix listed CWE-787
Priority CRITICAL 97KEV
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrat…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.44099 · Published 2007-02-03 · No fix listed
Priority CRITICAL 93KEV
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft O…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.93289 · Published 2018-01-10 · No fix listed CWE-787
Priority CRITICAL 93KEV
Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.82217 · Published 2017-10-13 · No fix listed CWE-119
Priority CRITICAL 93KEV
Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 S…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.57582 · Published 2016-10-14 · No fix listed CWE-119
Priority CRITICAL 93KEV
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.97246 · Published 2015-04-14 · No fix listed CWE-787
Priority CRITICAL 93KEV
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.77734 · Published 2014-03-24 · No fix listed CWE-787
Priority CRITICAL 93KEV
Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (mem…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.53033 · Published 2012-12-12 · No fix listed CWE-787
Priority CRITICAL 90
Microsoft Word Remote Code Execution Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.848 · Published 2023-02-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.70.23021201 +4 CWE-190
Priority CRITICAL 88KEV
Microsoft Word Information Disclosure Vulnerability
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.1957 · Published 2023-09-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5413.1000 +1 CWE-20
Priority HIGH 77
Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka "Word PAPX Section Corruption Vuln…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.67065 · Published 2012-10-09 · No fix listed CWE-94
Priority HIGH 72
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted email message processe…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.53815 · Published 2015-12-09 · No fix listed CWE-20
Priority HIGH 71
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Serve…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.43407 · Published 2015-08-15 · No fix listed CWE-119
Priority HIGH 71
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM fiel…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.49024 · Published 2004-09-17 · No fix listed
Priority HIGH 68
Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Loc…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.40942 · Published 2015-03-11 · No fix listed CWE-19
Priority HIGH 68
Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka "Word Pointer Vulnerability."
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.40126 · Published 2010-10-13 · No fix listed CWE-399
Priority HIGH 68
Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.41265 · Published 2006-12-14 · No fix listed
Priority HIGH 67
Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 F…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.39813 · Published 2010-08-11 · No fix listed CWE-94
Priority HIGH 67
Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corrupt…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.392 · Published 2007-01-26 · No fix listed
Priority HIGH 67
Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.32429 · Published 2004-10-20 · No fix listed
Priority HIGH 65
Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.33718 · Published 2006-12-06 · No fix listed
Priority MEDIUM 64
Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.47194 · Published 2016-08-09 · No fix listed CWE-119
Priority MEDIUM 64
Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer allows remote attackers to execute arbitrary code via a crafted document, aka "Mi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.26857 · Published 2015-08-15 · No fix listed CWE-189
Priority MEDIUM 64
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.26857 · Published 2015-08-15 · No fix listed CWE-119
Load more