Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

125 records

TI-2019-00334 CVE-2019-0540 · GHSA-64wm-87jc-34mv

Open redirect in Microsoft Office

Priority LOW 38

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.10832 Published 2019-03-06 No fix listed CWE-601
TI-2019-00335 CVE-2019-0541 · GHSA-f832-7fhg-m78h

Command injection in Microsoft Office

Priority CRITICAL 97KEV

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Vie…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.53202 Published 2019-01-08 No fix listed CWE-77
Priority LOW 36

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Discl…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.08624 Published 2018-12-12 No fix listed CWE-908
Priority MEDIUM 52

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Off…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19059 Published 2018-11-14 No fix listed
Priority MEDIUM 52

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Micros…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19546 Published 2018-10-10 No fix listed
TI-2018-06109 CVE-2018-8427 · GHSA-ch57-57p3-fhm7

Information disclosure in Microsoft Office

Priority LOW 29

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Offi…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.02293 Published 2018-10-10 No fix listed CWE-200
Priority LOW 39

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Micros…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.12255 Published 2018-09-13 No fix listed CWE-200
Priority LOW 39

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Micros…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.13055 Published 2018-08-15 No fix listed CWE-200
TI-2018-06064 CVE-2018-8378 · GHSA-q4j3-h8qw-m7m4

Out-of-bounds read in Microsoft Word

Priority LOW 35

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Dis…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.07306 Published 2018-08-15 No fix listed CWE-125
Priority MEDIUM 51

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Exc…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.17287 Published 2018-08-15 No fix listed
Priority MEDIUM 43

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Micros…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.19559 Published 2018-06-14 No fix listed CWE-200
Priority MEDIUM 53

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Exc…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.2075 Published 2018-04-12 No fix listed
TI-2017-08817 CVE-2017-11878 · GHSA-q2c7-rf7r-47cc

Memory corruption in Microsoft Office

Priority MEDIUM 43

Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pac…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.06167 Published 2017-11-15 No fix listed CWE-119
TI-2017-00046 CVE-2017-0052 · GHSA-x77g-2fw6-m834

Memory corruption in Microsoft Office

Priority MEDIUM 51

Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17644 Published 2017-03-17 No fix listed CWE-119
TI-2017-00006 CVE-2017-0006 · GHSA-5hvx-xhqr-7cc9

Memory corruption in Microsoft Office

Priority MEDIUM 51

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17644 Published 2017-03-17 No fix listed CWE-119
Load more