Priority CRITICAL 97KEV
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of servi…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.40124 · Published 2015-07-14 · No fix listed CWE-787
Priority CRITICAL 97KEV
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrat…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.44099 · Published 2007-02-03 · No fix listed
Priority CRITICAL 93KEV
Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 S…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.57582 · Published 2016-10-14 · No fix listed CWE-119
Priority CRITICAL 93KEV
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.77734 · Published 2014-03-24 · No fix listed CWE-787
Priority CRITICAL 93KEV
GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execu…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.84853 · Published 2013-11-06 · No fix listed CWE-94
Priority HIGH 71
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Serve…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.43407 · Published 2015-08-15 · No fix listed CWE-119
Priority HIGH 69
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.54809 · Published 2016-09-14 · No fix listed CWE-119
Priority HIGH 68
Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.40511 · Published 2008-05-13 · No fix listed CWE-94
Priority HIGH 68
Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.41265 · Published 2006-12-14 · No fix listed
Priority HIGH 67
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulner…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.49831 · Published 2016-08-09 · No fix listed CWE-119
Priority HIGH 67
Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown attack vectors that trigger memory corrupt…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.392 · Published 2007-01-26 · No fix listed
Priority HIGH 66
The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Of…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.30323 · Published 2016-10-14 · No fix listed CWE-20
Priority HIGH 66
The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Wo…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.40838 · Published 2016-04-12 · No fix listed CWE-119
Priority HIGH 65
The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.5047 · Published 2017-03-17 · No fix listed CWE-119
Priority HIGH 65
The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Atte…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.50506 · Published 2016-08-09 · No fix listed CWE-20
Priority HIGH 65
The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Atte…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.50506 · Published 2016-08-09 · No fix listed CWE-20
Priority HIGH 65
Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.33718 · Published 2006-12-06 · No fix listed
Priority MEDIUM 64
Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer allows remote attackers to execute arbitrary code via a crafted document, aka "Mi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.26857 · Published 2015-08-15 · No fix listed CWE-189
Priority MEDIUM 64
Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.31574 · Published 2013-01-09 · No fix listed CWE-94
Priority MEDIUM 64
Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large numbe…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.30869 · Published 2008-05-13 · No fix listed CWE-399
Priority MEDIUM 64
Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.30307 · Published 2007-02-13 · No fix listed CWE-20
Priority MEDIUM 64
Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.32163 · Published 2006-12-11 · No fix listed
Priority MEDIUM 63
The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3;…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.44492 · Published 2016-08-09 · No fix listed CWE-20
Priority MEDIUM 63
Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.28839 · Published 2015-04-14 · No fix listed
Priority MEDIUM 63
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arb…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.29954 · Published 2015-02-11 · No fix listed CWE-399
Load more