Microsoft Microsoft Word
20 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1448 | 2016 (32-bit edition) ; 2016 (64-bit edition) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 10.0 % | ||
| CVE-2020-1447 | | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 11 % | ||
| CVE-2020-1446 | | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 11 % | ||
| CVE-2020-1445 | | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office | MEDIUM 5.5 | 6.1 % | ||
| CVE-2020-1342 | | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, wh | MEDIUM 5.5 | 6.4 % | ||
| CVE-2020-1229 | 2016 (32-bit edition) ; 2016 (64-bit edition) ; 2010 Service Pack 2 (32-bit editions) ; … | A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, a | MEDIUM 4.3 | 3.9 % | ||
| CVE-2020-0980 | | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0760 | | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote C | HIGH 8.8 | 8.8 % | ||
| CVE-2020-0892 | | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 12 % | ||
| CVE-2020-0850 | | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 8.8 | 8.8 % | ||
| CVE-2019-1461 | 2016 (32-bit edition) ; 2016 (64-bit edition) ; 2010 Service Pack 2 (32-bit editions) ; … | A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Micro | MEDIUM 6.5 | 5.0 % | ||
| CVE-2019-0953 | 2016 (32-bit edition) ; 2016 (64-bit edition) | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W | HIGH 7.8 | 13 % | ||
| CVE-2019-0585 | | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 8.8 | 22 % | ||
| CVE-2019-0561 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclo | MEDIUM 5.5 | 7.9 % | ||
| CVE-2018-8573 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 7.8 | 19 % | ||
| CVE-2018-8504 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View | HIGH 8.8 | 20 % | ||
| CVE-2018-8430 | 2013 RT Service Pack 1 ; 2013 Service Pack 1 (32-bit editions) ; 2013 Service Pack 1 (64-bit editions) ; … | A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execu | HIGH 7.8 | 23 % | ||
| CVE-2018-8310 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka " | HIGH 7.5 | 5.9 % | ||
| CVE-2018-8161 | 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; 2013 RT Service Pack 1 ; … | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka | HIGH 7.8 | 21 % | ||
| CVE-2018-0950 | 2007 Service Pack 3 ; 2010 Service Pack 2 (32-bit editions) ; 2010 Service Pack 2 (64-bit editions) ; … | An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a messa | MEDIUM 6.5 | 8.9 % |