Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

206 records

Priority LOW 36

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Discl…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.08624 Published 2018-12-12 No fix listed CWE-908
Priority MEDIUM 50

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 Pr…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.1613 Published 2018-12-12 No fix listed
Priority MEDIUM 52

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Off…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19059 Published 2018-11-14 No fix listed
Priority MEDIUM 52

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Micros…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.19546 Published 2018-10-10 No fix listed
TI-2018-06109 CVE-2018-8427 · GHSA-ch57-57p3-fhm7

Information disclosure in Microsoft Office

Priority LOW 29

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Offi…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.02293 Published 2018-10-10 No fix listed CWE-200
Priority LOW 39

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Micros…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.12255 Published 2018-09-13 No fix listed CWE-200
Priority LOW 39

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Micros…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.13055 Published 2018-08-15 No fix listed CWE-200
TI-2018-06064 CVE-2018-8378 · GHSA-q4j3-h8qw-m7m4

Out-of-bounds read in Microsoft Word

Priority LOW 35

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Dis…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.07306 Published 2018-08-15 No fix listed CWE-125
Priority MEDIUM 51

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Exc…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.17287 Published 2018-08-15 No fix listed
Priority MEDIUM 43

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Micros…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.19559 Published 2018-06-14 No fix listed CWE-200
TI-2018-05905 CVE-2018-8160 · GHSA-m8vr-j794-rf47

Information disclosure in Microsoft Word

Priority MEDIUM 40

An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Word, Microsoft Office.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.08461 Published 2018-05-09 No fix listed CWE-200
Priority MEDIUM 55

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Off…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.24253 Published 2018-05-09 No fix listed
Priority MEDIUM 55

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Off…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.24253 Published 2018-05-09 No fix listed
Priority MEDIUM 53

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Exc…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.2075 Published 2018-04-12 No fix listed
Priority MEDIUM 52

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Exc…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.19048 Published 2018-04-12 No fix listed
TI-2018-00857 CVE-2018-0922 · GHSA-6v4p-rx2q-99q9

Out-of-bounds write in Microsoft Office

Priority MEDIUM 52

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17959 Published 2018-03-14 No fix listed CWE-787
Priority MEDIUM 55

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.24662 Published 2018-01-10 No fix listed CWE-787
Load more