Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

42 records

TI-2019-00335 CVE-2019-0541 · GHSA-f832-7fhg-m78h

Command injection in Microsoft Office

Priority CRITICAL 97KEV

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Vie…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.53202 Published 2019-01-08 No fix listed CWE-77
TI-2018-06109 CVE-2018-8427 · GHSA-ch57-57p3-fhm7

Information disclosure in Microsoft Office

Priority LOW 29

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Offi…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.02293 Published 2018-10-10 No fix listed CWE-200
TI-2018-06064 CVE-2018-8378 · GHSA-q4j3-h8qw-m7m4

Out-of-bounds read in Microsoft Word

Priority LOW 35

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Dis…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.07306 Published 2018-08-15 No fix listed CWE-125
TI-2018-00857 CVE-2018-0922 · GHSA-6v4p-rx2q-99q9

Out-of-bounds write in Microsoft Office

Priority MEDIUM 52

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.17959 Published 2018-03-14 No fix listed CWE-787
TI-2018-00792 CVE-2018-0851 · GHSA-9pmg-xvj6-wmhq

Out-of-bounds write in Microsoft Office

Priority MEDIUM 58

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.19111 Published 2018-02-15 No fix listed CWE-787
TI-2017-08774 CVE-2017-11826 · GHSA-4qcg-gx82-4h36

Memory corruption in Microsoft Office

Priority CRITICAL 93KEV

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.82217 Published 2017-10-13 No fix listed CWE-119
Priority MEDIUM 48

Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.14264 Published 2017-09-13 No fix listed CWE-119
Priority LOW 36

Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office…

CVSS 3.0MEDIUM 5.3 Network No auth User interaction EPSS 0.09643 Published 2017-09-13 No fix listed CWE-200
Priority HIGH 69

Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.49765 Published 2017-09-13 No fix listed CWE-20
Priority LOW 31

The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016…

CVSS 3.0LOW 3.3 Local Low privileges No interaction EPSS 0.1404 Published 2017-09-13 No fix listed CWE-200
Priority LOW 28

Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft O…

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.02973 Published 2017-06-15 No fix listed CWE-200
Priority MEDIUM 45

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 all…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.33359 Published 2017-03-17 No fix listed CWE-200
Priority MEDIUM 41

The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 all…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.15939 Published 2017-03-17 No fix listed CWE-200
Priority CRITICAL 93KEV

Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (mem…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.53033 Published 2012-12-12 No fix listed CWE-787
Priority MEDIUM 58

Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed record in a Word file, aka "Word HTM…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.19399 Published 2010-08-11 No fix listed CWE-94
Load more