Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

87 records in Word Viewer · all components

Priority CRITICAL 97KEV

Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of servi…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.40124 Published 2015-07-14 No fix listed CWE-787
Priority CRITICAL 97KEV

Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrat…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.44099 Published 2007-02-03 No fix listed
Priority CRITICAL 93KEV

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 S…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.57582 Published 2016-10-14 No fix listed CWE-119
Priority CRITICAL 93KEV

Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.77734 Published 2014-03-24 No fix listed CWE-787
Priority CRITICAL 93KEV

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execu…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.84853 Published 2013-11-06 No fix listed CWE-94
Priority HIGH 71

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Serve…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.43407 Published 2015-08-15 No fix listed CWE-119
Priority HIGH 66

The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold and 1511; Office 2007 SP3 and 2010 SP2; Wo…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.40838 Published 2016-04-12 No fix listed CWE-119
Priority HIGH 65

The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.5047 Published 2017-03-17 No fix listed CWE-119
Priority MEDIUM 64

Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer allows remote attackers to execute arbitrary code via a crafted document, aka "Mi…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.26857 Published 2015-08-15 No fix listed CWE-189
Priority MEDIUM 64

Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large numbe…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.30869 Published 2008-05-13 No fix listed CWE-399
Priority MEDIUM 64

Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.30307 Published 2007-02-13 No fix listed CWE-20
Load more
Open these records in search →