Priority LOW 38
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0643 · Published 2019-03-06 · No fix listed
Priority LOW 38
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.10832 · Published 2019-03-06 · No fix listed CWE-601
Priority CRITICAL 97KEV
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Vie…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.53202 · Published 2019-01-08 · No fix listed CWE-77
Priority LOW 36
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Discl…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.08624 · Published 2018-12-12 · No fix listed CWE-908
Priority MEDIUM 52
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Off…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.19059 · Published 2018-11-14 · No fix listed
Priority MEDIUM 52
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Micros…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.19546 · Published 2018-10-10 · No fix listed
Priority LOW 29
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Offi…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.02293 · Published 2018-10-10 · No fix listed CWE-200
Priority LOW 39
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Micros…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.12255 · Published 2018-09-13 · No fix listed CWE-200
Priority LOW 39
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Micros…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.13055 · Published 2018-08-15 · No fix listed CWE-200
Priority LOW 35
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Dis…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.07306 · Published 2018-08-15 · No fix listed CWE-125
Priority MEDIUM 51
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Exc…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.17287 · Published 2018-08-15 · No fix listed
Priority MEDIUM 43
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Micros…
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.19559 · Published 2018-06-14 · No fix listed CWE-200
Priority MEDIUM 53
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Exc…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.2075 · Published 2018-04-12 · No fix listed
Priority MEDIUM 58
Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.23257 · Published 2018-01-10 · No fix listed
Priority MEDIUM 43
Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pac…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.06167 · Published 2017-11-15 · No fix listed CWE-119
Priority LOW 32
Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pac…
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.04546 · Published 2017-11-15 · No fix listed
Priority MEDIUM 51
A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Micro…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.16991 · Published 2017-09-13 · No fix listed
Priority MEDIUM 54
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability".
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.22504 · Published 2017-07-11 · No fix listed CWE-119
Priority MEDIUM 51
Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.17644 · Published 2017-03-17 · No fix listed CWE-119
Priority MEDIUM 51
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.17644 · Published 2017-03-17 · No fix listed CWE-119
Priority MEDIUM 54
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry check, which allows user-assisted remote a…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.22785 · Published 2016-12-20 · No fix listed CWE-20
Priority MEDIUM 51
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server…
CVSS 3.0HIGH 7.1· Local · No auth · User interaction · EPSS 0.21658 · Published 2016-12-20 · No fix listed CWE-125
Priority MEDIUM 52
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (o…
CVSS 3.0HIGH 7.1· Local · No auth · User interaction · EPSS 0.23211 · Published 2016-12-20 · No fix listed CWE-125
Priority CRITICAL 93KEV
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted ce…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.5884 · Published 2016-12-20 · No fix listed
Priority MEDIUM 52
Microsoft Excel 2007 SP3, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulner…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.18664 · Published 2016-11-10 · No fix listed CWE-119
Load more