Microsoft Word
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-41165 | 16.83 for macOS | A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privilege | CRITICAL 9.1 | 0.7 % | ||
| CVE-2019-0585 | Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 8.8 | 22 % | ||
| CVE-2019-0561 | Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 | An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclo | MEDIUM 5.5 | 7.9 % | ||
| CVE-2018-8378 | Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, wh | MEDIUM 5.5 | 7.3 % | ||
| CVE-2018-8161 | Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 ; Automation Services on Microsoft SharePoint Server 2013 Service Pack 1 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka | HIGH 7.8 | 21 % | ||
| CVE-2018-8160 | Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 | An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerabil | MEDIUM 6.5 | 8.5 % | ||
| CVE-2018-1028 | Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 ; Automation Services on Microsoft SharePoint Server 2013 Service Pack 1 | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Mi | HIGH 8.8 | 19 % |