Microsoft Microsoft Office
125 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1449 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka | HIGH 7.8 | 4.6 % | ||
| CVE-2020-1448 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 10.0 % | ||
| CVE-2020-1447 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 11 % | ||
| CVE-2020-1446 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 11 % | ||
| CVE-2020-1445 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office | MEDIUM 5.5 | 6.1 % | ||
| CVE-2020-1409 | | A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V | HIGH 7.8 | 12 % | ||
| CVE-2020-1342 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, wh | MEDIUM 5.5 | 6.4 % | ||
| CVE-2020-1349 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsof | HIGH 7.8 | 23 % | ||
| CVE-2020-1322 | 2019 for 32-bit editions ; 2019 for 64-bit editions | An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Micro | MEDIUM 6.5 | 5.6 % | ||
| CVE-2020-1321 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft | HIGH 8.8 | 12 % | ||
| CVE-2020-1229 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, a | MEDIUM 4.3 | 3.9 % | ||
| CVE-2020-1226 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 8.8 | 17 % | ||
| CVE-2020-1225 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 8.8 | 17 % | ||
| CVE-2020-0991 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2016 (32-bit edition) ; … | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka | HIGH 7.8 | 12 % | ||
| CVE-2020-0980 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0961 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2016 (32-bit edition) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 12 % | ||
| CVE-2020-0906 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2016 (32-bit edition) ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 8.8 | 12 % | ||
| CVE-2020-0760 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2016 (32-bit edition) ; … | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote C | HIGH 8.8 | 8.8 % | ||
| CVE-2020-0892 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0855 | 2019 for Mac | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0852 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2016 for Mac | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0851 | 2019 for Mac ; 2016 for Mac | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0850 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 8.8 % | ||
| CVE-2020-0759 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 8.8 | 15 % | ||
| CVE-2020-0696 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Mic | MEDIUM 6.5 | 5.0 % | ||
| CVE-2020-0652 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2016 (32-bit edition) ; … | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka | HIGH 7.8 | 17 % | ||
| CVE-2020-0651 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 7.8 | 17 % | ||
| CVE-2020-0650 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 7.8 | 17 % | ||
| CVE-2019-1464 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In | MEDIUM 5.5 | 8.7 % | ||
| CVE-2019-1463 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2016 (32-bit edition) ; … | An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, ak | MEDIUM 5.5 | 2.3 % | ||
| CVE-2019-1462 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2019 for Mac ; … | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, | HIGH 7.8 | 18 % | ||
| CVE-2019-1461 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2010 Service Pack 2 (32-bit editions) ; … | A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Micro | MEDIUM 6.5 | 5.0 % | ||
| CVE-2019-1400 | 2019 for 32-bit editions ; 2019 for 64-bit editions ; 2016 (32-bit edition) ; … | An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, ak | MEDIUM 5.5 | 2.3 % | ||
| CVE-2019-1457 | 2016 for Mac ; 2019 for Mac | A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka 'Micro | HIGH 7.8 | 3.7 % | ||
| CVE-2019-1449 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which c | CRITICAL 9.8 | 6.8 % | ||
| CVE-2019-1448 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 7.8 | 30 % | ||
| CVE-2019-1446 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In | MEDIUM 5.5 | 8.9 % | ||
| CVE-2019-1402 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, ak | MEDIUM 5.5 | 2.4 % | ||
| CVE-2019-1331 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 8.8 | 20 % | ||
| CVE-2019-1327 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 8.8 | 14 % | ||
| CVE-2019-1297 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 8.8 | 22 % | KEV | |
| CVE-2019-1264 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass | HIGH 7.8 | 3.8 % | ||
| CVE-2019-1263 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In | MEDIUM 5.5 | 7.8 % | ||
| CVE-2019-1246 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En | HIGH 7.8 | 13 % | ||
| CVE-2019-1112 | 2019 for 32-bit editions ; 2019 for 64-bit editions | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In | MEDIUM 5.5 | 8.7 % | ||
| CVE-2019-1111 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 8.8 | 13 % | ||
| CVE-2019-1110 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 8.8 | 13 % | ||
| CVE-2019-1109 | 2013 Service Pack 1 (32-bit editions) ; 2013 Service Pack 1 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office docu | CRITICAL 9.1 | 4.2 % | ||
| CVE-2019-1084 | 2013 Service Pack 1 (32-bit editions) ; 2013 Service Pack 1 (64-bit editions) ; 2013 RT Service Pack 1 ; … | An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. | MEDIUM 6.5 | 5.3 % | ||
| CVE-2019-0953 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 13 % | ||
| CVE-2019-0947 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 14 % | ||
| CVE-2019-0946 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 14 % | ||
| CVE-2019-0945 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 14 % | ||
| CVE-2019-0828 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' | HIGH 7.8 | 14 % | ||
| CVE-2019-0827 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 11 % | ||
| CVE-2019-0826 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 11 % | ||
| CVE-2019-0825 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2016 (32-bit edition) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 11 % | ||
| CVE-2019-0824 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 11 % | ||
| CVE-2019-0823 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 11 % | ||
| CVE-2019-0822 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics | HIGH 7.8 | 14 % | ||
| CVE-2019-0801 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an a | HIGH 7.8 | 19 % | ||
| CVE-2019-0748 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 14 % | ||
| CVE-2019-0675 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 15 % | ||
| CVE-2019-0674 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 18 % | ||
| CVE-2019-0673 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 15 % | ||
| CVE-2019-0672 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 15 % | ||
| CVE-2019-0671 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka | HIGH 7.8 | 15 % | ||
| CVE-2019-0669 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2016 for Mac ; … | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In | MEDIUM 6.5 | 6.4 % | ||
| CVE-2019-0540 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 Service Pack 1 (32-bit editions) ; … | A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially craf | MEDIUM 5.5 | 13 % | ||
| CVE-2019-0585 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2016 for Mac ; … | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 8.8 | 22 % | ||
| CVE-2019-0561 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2016 for Mac ; … | An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclo | MEDIUM 5.5 | 7.9 % | ||
| CVE-2019-0560 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office | MEDIUM 5.5 | 8.7 % | ||
| CVE-2019-0559 | 2019 for 32-bit editions ; 2019 for 64-bit editions | An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook I | MEDIUM 6.5 | 6.8 % | ||
| CVE-2019-0541 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Ex | HIGH 8.8 | 53 % | KEV | |
| CVE-2018-8636 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 16 % | ||
| CVE-2018-8628 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, | HIGH 7.8 | 16 % | ||
| CVE-2018-8627 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2016 for Mac ; … | An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, whi | MEDIUM 5.5 | 8.6 % | ||
| CVE-2018-8598 | 2019 for 32-bit editions ; 2019 for 64-bit editions | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In | MEDIUM 4.7 | 6.2 % | ||
| CVE-2018-8597 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2016 for Mac ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 16 % | ||
| CVE-2018-8587 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof | HIGH 7.8 | 29 % | ||
| CVE-2018-8582 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft O | HIGH 8.8 | 19 % | ||
| CVE-2018-8579 | 2019 for 32-bit editions ; 2019 for 64-bit editions | An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulne | MEDIUM 6.5 | 6.3 % | ||
| CVE-2018-8577 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 19 % | ||
| CVE-2018-8576 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof | HIGH 7.8 | 19 % | ||
| CVE-2018-8574 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 19 % | ||
| CVE-2018-8573 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2019 for 32-bit editions ; … | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 7.8 | 19 % | ||
| CVE-2018-8558 | 2019 for 32-bit editions ; 2019 for 64-bit editions | An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the Share | MEDIUM 6.5 | 5.6 % | ||
| CVE-2018-8546 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This aff | MEDIUM 5.9 | 5.5 % | ||
| CVE-2018-8539 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; Web Apps 2010 Service Pack 2 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 7.8 | 19 % | ||
| CVE-2018-8524 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof | HIGH 7.8 | 19 % | ||
| CVE-2018-8522 | 2019 for 32-bit editions ; 2019 for 64-bit editions | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof | HIGH 7.8 | 19 % | ||
| CVE-2018-8504 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View | HIGH 8.8 | 20 % | ||
| CVE-2018-8502 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected Vie | HIGH 8.8 | 20 % | ||
| CVE-2018-8501 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protecte | HIGH 8.8 | 20 % | ||
| CVE-2018-8432 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics | HIGH 7.8 | 20 % | ||
| CVE-2018-8427 | 2016 for Mac ; 2019 for 32-bit editions ; 2019 for 64-bit editions ; … | An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphi | MEDIUM 5.5 | 2.3 % | ||
| CVE-2018-8430 | 2016 Click-to-Run (C2R) for 32-bit editions ; 2016 Click-to-Run (C2R) for 64-bit editions | A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execu | HIGH 7.8 | 23 % | ||
| CVE-2018-8429 | 2016 Click-to-Run (C2R) for 32-bit editions ; 2016 Click-to-Run (C2R) for 64-bit editions ; 2016 for Mac ; … | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In | MEDIUM 5.5 | 12 % | ||
| CVE-2018-8332 | 2016 Click-to-Run (C2R) for 32-bit editions ; 2016 Click-to-Run (C2R) for 64-bit editions ; 2016 for Mac | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k | HIGH 8.8 | 19 % | ||
| CVE-2018-8331 | 2016 Click-to-Run (C2R) for 32-bit editions ; 2016 Click-to-Run (C2R) for 64-bit editions ; 2016 for Mac | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 20 % | ||
| CVE-2018-8412 | 2016 for Mac | An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before e | HIGH 7.8 | 1.4 % | ||
| CVE-2018-8382 | 2016 for Mac ; Compatibility Pack Service Pack 3 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In | MEDIUM 5.5 | 13 % | ||
| CVE-2018-8378 | | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, wh | MEDIUM 5.5 | 7.3 % | ||
| CVE-2018-8375 | 2016 for Mac ; Compatibility Pack Service Pack 3 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 17 % | ||
| CVE-2018-8312 | 2016 Click-to-Run (C2R) for 32-bit editions ; 2016 Click-to-Run (C2R) for 64-bit editions | A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote | HIGH 7.8 | 21 % | ||
| CVE-2018-8310 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2016 Click-to-Run (C2R) for 32-bit editions ; … | A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka " | HIGH 7.5 | 5.9 % | ||
| CVE-2018-8281 | 2016 Click-to-Run (C2R) for 32-bit editions ; 2016 Click-to-Run (C2R) for 64-bit editions ; 2016 for Mac ; … | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka | HIGH 7.8 | 21 % | ||
| CVE-2018-8248 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 22 % | ||
| CVE-2018-8247 | Web Apps Server 2013 Service Pack 1 | An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web request | MEDIUM 5.4 | 3.5 % | ||
| CVE-2018-8244 | 2016 Click-to-Run (C2R) for 32-bit editions ; 2016 Click-to-Run (C2R) for 64-bit editions | An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka "Microsoft Outlook | MEDIUM 6.5 | 5.2 % | ||
| CVE-2018-8176 | 2016 for Mac | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka | HIGH 8.8 | 24 % | ||
| CVE-2018-8162 | 2016 Click-to-Run (C2R) for 32-bit editions ; 2016 Click-to-Run (C2R) for 64-bit editions | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 24 % | ||
| CVE-2018-8161 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; Web Apps 2010 Service Pack 2 ; … | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka | HIGH 7.8 | 21 % | ||
| CVE-2018-8160 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; Compatibility Pack Service Pack 3 ; … | An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerabil | MEDIUM 6.5 | 8.5 % | ||
| CVE-2018-8157 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka | HIGH 7.8 | 24 % | ||
| CVE-2018-8150 | 2016 Click-to-Run (C2R) for 32-bit editions ; 2016 Click-to-Run (C2R) for 64-bit editions | A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly handle attachments, aka | MEDIUM 6.5 | 5.3 % | ||
| CVE-2018-8148 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 24 % | ||
| CVE-2018-8147 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 24 % | ||
| CVE-2018-1030 | 2013 RT Service Pack 1 ; 2013 Service Pack 1 (32-bit editions) ; 2013 Service Pack 1 (64-bit editions) ; … | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka | HIGH 8.8 | 24 % | ||
| CVE-2018-1029 | 2016 for Mac ; Compatibility Pack Service Pack 3 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 21 % | ||
| CVE-2018-1028 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Mi | HIGH 8.8 | 19 % | ||
| CVE-2018-1027 | Compatibility Pack Service Pack 3 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 19 % | ||
| CVE-2018-1026 | 2013 RT Service Pack 1 ; 2013 Service Pack 1 (32-bit editions) ; 2013 Service Pack 1 (64-bit editions) ; … | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka | HIGH 8.8 | 41 % | ||
| CVE-2018-1007 | 2016 (32-bit edition) ; 2016 (64-bit edition) | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office | MEDIUM 5.3 | 6.5 % | ||
| CVE-2018-0950 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2016 Click-to-Run (C2R) for 32-bit editions ; … | An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a messa | MEDIUM 6.5 | 8.9 % |