Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

84 records

Priority MEDIUM 48

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.11829 Published 2020-04-15 No fix listed
TI-2020-00627 CVE-2020-0652 · GHSA-66vw-cj4r-f5fq

Out-of-bounds write in Microsoft Office

Priority MEDIUM 52

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Memory Corruption Vulnerability'.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.1821 Published 2020-01-14 No fix listed CWE-787
TI-2019-01162 CVE-2019-1464 · GHSA-v2x5-cx2r-jprq

Information disclosure in Microsoft Office

Priority LOW 36

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0869 Published 2019-12-10 No fix listed CWE-200
TI-2019-01161 CVE-2019-1463 · GHSA-7mx7-663h-f752

Information disclosure in Microsoft Office

Priority LOW 29

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.02312 Published 2019-12-10 No fix listed CWE-200
Priority MEDIUM 51

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution Vulnerability'.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.17679 Published 2019-12-10 No fix listed CWE-908
TI-2019-01110 CVE-2019-1400 · GHSA-4x3p-hxpv-v3m8

Information disclosure in Microsoft Office

Priority LOW 29

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.02312 Published 2019-12-10 No fix listed CWE-200
Load more