# Microsoft Office.

Every CVE that names Microsoft Office among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Microsoft Office: A remote code execution vulnerability exists when Microsoft Office fails to properly…](https://agentprime.io/advisories/CVE-2019-0801.md)
  `CVE-2019-0801` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 9 Apr 2019
- [Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…](https://agentprime.io/advisories/CVE-2019-0748.md)
  `CVE-2019-0748` · CVE record: Microsoft Microsoft Office · No CVSS score · EPSS 0.14 · Not analysed yet · Published 8 Apr 2019
- [Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…](https://agentprime.io/advisories/CVE-2019-0675.md)
  `CVE-2019-0675` · CVE record: Microsoft Microsoft Office · No CVSS score · EPSS 0.15 · Not analysed yet · Published 6 Mar 2019
- [Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…](https://agentprime.io/advisories/CVE-2019-0674.md)
  `CVE-2019-0674` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · EPSS 0.18 · Not analysed yet · Published 6 Mar 2019
- [Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…](https://agentprime.io/advisories/CVE-2019-0673.md)
  `CVE-2019-0673` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · EPSS 0.15 · Not analysed yet · Published 6 Mar 2019
- [Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…](https://agentprime.io/advisories/CVE-2019-0672.md)
  `CVE-2019-0672` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · EPSS 0.15 · Not analysed yet · Published 6 Mar 2019
- [Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…](https://agentprime.io/advisories/CVE-2019-0671.md)
  `CVE-2019-0671` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · EPSS 0.15 · Not analysed yet · Published 6 Mar 2019
- [Microsoft Excel: An information disclosure vulnerability exists when Microsoft Excel improperly discloses…](https://agentprime.io/advisories/CVE-2019-0669.md)
  `CVE-2019-0669` · CVE record: Microsoft Microsoft Excel and 4 more · No CVSS score · Not analysed yet · Published 6 Mar 2019
- [Microsoft Office: A security feature bypass vulnerability exists when Microsoft Office does not validate…](https://agentprime.io/advisories/CVE-2019-0540.md)
  `CVE-2019-0540` · CVE record: Microsoft Microsoft Office and 4 more · No CVSS score · EPSS 0.11 · Not analysed yet · Published 6 Mar 2019
- [Microsoft Word: A remote code execution vulnerability exists in Microsoft Word software when it fails to…](https://agentprime.io/advisories/CVE-2019-0585.md)
  `CVE-2019-0585` · CVE record: Microsoft Word and 4 more · No CVSS score · EPSS 0.22 · Not analysed yet · Published 8 Jan 2019
- [Microsoft Word: An information disclosure vulnerability exists when Microsoft Word macro buttons are used…](https://agentprime.io/advisories/CVE-2019-0561.md)
  `CVE-2019-0561` · CVE record: Microsoft Microsoft Word and 3 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Office: An information disclosure vulnerability exists when Microsoft Office improperly discloses…](https://agentprime.io/advisories/CVE-2019-0560.md)
  `CVE-2019-0560` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Microsoft Office: An information disclosure vulnerability exists when Microsoft Outlook improperly handles…](https://agentprime.io/advisories/CVE-2019-0559.md)
  `CVE-2019-0559` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · Not analysed yet · Published 8 Jan 2019
- [Command injection in Microsoft Office and others](https://agentprime.io/advisories/CVE-2019-0541.md)
  `CVE-2019-0541` · CVE record: Microsoft Microsoft Office and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.53 · Not analysed yet · Published 8 Jan 2019 · Tags: Command injection
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8636.md)
  `CVE-2018-8636` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 12 Dec 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft PowerPoint software when the…](https://agentprime.io/advisories/CVE-2018-8628.md)
  `CVE-2018-8628` · CVE record: Microsoft Microsoft Office and 4 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 12 Dec 2018
- [Microsoft Office: An information disclosure vulnerability exists when Microsoft Excel software reads out of…](https://agentprime.io/advisories/CVE-2018-8627.md)
  `CVE-2018-8627` · CVE record: Microsoft Microsoft Office and 4 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Office: An information disclosure vulnerability exists when Microsoft Excel improperly discloses…](https://agentprime.io/advisories/CVE-2018-8598.md)
  `CVE-2018-8598` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · Not analysed yet · Published 12 Dec 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8597.md)
  `CVE-2018-8597` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 12 Dec 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Outlook software when it fails…](https://agentprime.io/advisories/CVE-2018-8587.md)
  `CVE-2018-8587` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · EPSS 0.29 · Not analysed yet · Published 12 Dec 2018
- [Microsoft Office: A remote code execution vulnerability exists in the way that Microsoft Outlook parses…](https://agentprime.io/advisories/CVE-2018-8582.md)
  `CVE-2018-8582` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Office: An information disclosure vulnerability exists when attaching files to Outlook messages…](https://agentprime.io/advisories/CVE-2018-8579.md)
  `CVE-2018-8579` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8577.md)
  `CVE-2018-8577` · CVE record: Microsoft Microsoft Office and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Outlook software when it fails…](https://agentprime.io/advisories/CVE-2018-8576.md)
  `CVE-2018-8576` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Project: A remote code execution vulnerability exists in Microsoft Project software when it fails…](https://agentprime.io/advisories/CVE-2018-8575.md)
  `CVE-2018-8575` · CVE record: Microsoft Microsoft Project and 2 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8574.md)
  `CVE-2018-8574` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Word: A remote code execution vulnerability exists in Microsoft Word software when it fails to…](https://agentprime.io/advisories/CVE-2018-8573.md)
  `CVE-2018-8573` · CVE record: Microsoft Microsoft Word and 2 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Office: An information disclosure vulnerability exists when Microsoft Outlook fails to respect…](https://agentprime.io/advisories/CVE-2018-8558.md)
  `CVE-2018-8558` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft Skype: A denial of service vulnerability exists in Skype for Business…](https://agentprime.io/advisories/CVE-2018-8546.md)
  `CVE-2018-8546` · CVE record: Microsoft Skype and 3 more · No CVSS score · Not analysed yet · Published 14 Nov 2018
- [Microsoft SharePoint Server: A remote code execution vulnerability exists in Microsoft Word software when it fails to…](https://agentprime.io/advisories/CVE-2018-8539.md)
  `CVE-2018-8539` · CVE record: Microsoft Microsoft SharePoint Server and 1 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Outlook software when it fails…](https://agentprime.io/advisories/CVE-2018-8524.md)
  `CVE-2018-8524` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 14 Nov 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Outlook software when it fails…](https://agentprime.io/advisories/CVE-2018-8522.md)
  `CVE-2018-8522` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 14 Nov 2018
- [Microsoft SharePoint Server: A remote code execution vulnerability exists in Microsoft Word software when the software…](https://agentprime.io/advisories/CVE-2018-8504.md)
  `CVE-2018-8504` · CVE record: Microsoft Microsoft SharePoint Server and 3 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 10 Oct 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8502.md)
  `CVE-2018-8502` · CVE record: Microsoft Microsoft Office and 2 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 10 Oct 2018
- [Microsoft PowerPoint Viewer: A remote code execution vulnerability exists in Microsoft PowerPoint software when the…](https://agentprime.io/advisories/CVE-2018-8501.md)
  `CVE-2018-8501` · CVE record: Microsoft PowerPoint Viewer and 3 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 10 Oct 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists in the way that Microsoft Graphics…](https://agentprime.io/advisories/CVE-2018-8432.md)
  `CVE-2018-8432` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 10 Oct 2018
- [Microsoft Office: An information disclosure vulnerability exists in the way that Microsoft Graphics…](https://agentprime.io/advisories/CVE-2018-8427.md)
  `CVE-2018-8427` · CVE record: Microsoft Microsoft Office and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2018
- [Microsoft Word: A remote code execution vulnerability exists in Microsoft Word if a user opens a…](https://agentprime.io/advisories/CVE-2018-8430.md)
  `CVE-2018-8430` · CVE record: Microsoft Microsoft Word and 1 more · No CVSS score · EPSS 0.23 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Excel Viewer: An information disclosure vulnerability exists when Microsoft Excel improperly discloses…](https://agentprime.io/advisories/CVE-2018-8429.md)
  `CVE-2018-8429` · CVE record: Microsoft Microsoft Excel Viewer and 2 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Windows 7: A remote code execution vulnerability exists when the Windows font library improperly…](https://agentprime.io/advisories/CVE-2018-8332.md)
  `CVE-2018-8332` · CVE record: Microsoft Windows 7 and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8331.md)
  `CVE-2018-8331` · CVE record: Microsoft Microsoft Office · No CVSS score · EPSS 0.20 · Not analysed yet · Published 13 Sept 2018
- [Microsoft Office: An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU)…](https://agentprime.io/advisories/CVE-2018-8412.md)
  `CVE-2018-8412` · CVE record: Microsoft Microsoft Office · No CVSS score · Not analysed yet · Published 15 Aug 2018
- [Microsoft Excel Viewer: An information disclosure vulnerability exists when Microsoft Excel improperly discloses…](https://agentprime.io/advisories/CVE-2018-8382.md)
  `CVE-2018-8382` · CVE record: Microsoft Microsoft Excel Viewer and 2 more · No CVSS score · EPSS 0.13 · Not analysed yet · Published 15 Aug 2018
- [Microsoft Word: An information disclosure vulnerability exists when Microsoft Office software reads out…](https://agentprime.io/advisories/CVE-2018-8378.md)
  `CVE-2018-8378` · CVE record: Microsoft Word and 4 more · No CVSS score · Not analysed yet · Published 15 Aug 2018
- [Microsoft Excel Viewer: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8375.md)
  `CVE-2018-8375` · CVE record: Microsoft Microsoft Excel Viewer and 2 more · No CVSS score · EPSS 0.17 · Not analysed yet · Published 15 Aug 2018
- [Microsoft Access: A remote code execution vulnerability exists when Microsoft Access fails to properly…](https://agentprime.io/advisories/CVE-2018-8312.md)
  `CVE-2018-8312` · CVE record: Microsoft Microsoft Access and 1 more · No CVSS score · EPSS 0.21 · Not analysed yet · Published 11 Jul 2018
- [Microsoft Word: A tampering vulnerability exists when Microsoft Outlook does not properly handle specific…](https://agentprime.io/advisories/CVE-2018-8310.md)
  `CVE-2018-8310` · CVE record: Microsoft Microsoft Word and 1 more · No CVSS score · Not analysed yet · Published 11 Jul 2018
- [Microsoft Excel Viewer: A remote code execution vulnerability exists in Microsoft Office software when the…](https://agentprime.io/advisories/CVE-2018-8281.md)
  `CVE-2018-8281` · CVE record: Microsoft Microsoft Excel Viewer and 3 more · No CVSS score · EPSS 0.21 · Not analysed yet · Published 11 Jul 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8248.md)
  `CVE-2018-8248` · CVE record: Microsoft Microsoft Office · No CVSS score · EPSS 0.21 · Not analysed yet · Published 14 Jun 2018
- [Microsoft Office: An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and…](https://agentprime.io/advisories/CVE-2018-8247.md)
  `CVE-2018-8247` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · Not analysed yet · Published 14 Jun 2018
- [Microsoft Office: An elevation of privilege vulnerability exists when Microsoft Outlook does not validate…](https://agentprime.io/advisories/CVE-2018-8244.md)
  `CVE-2018-8244` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · Not analysed yet · Published 14 Jun 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft PowerPoint software when the…](https://agentprime.io/advisories/CVE-2018-8176.md)
  `CVE-2018-8176` · CVE record: Microsoft Microsoft Office · No CVSS score · EPSS 0.23 · Not analysed yet · Published 23 May 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8162.md)
  `CVE-2018-8162` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · EPSS 0.24 · Not analysed yet · Published 9 May 2018
- [Microsoft Word: A remote code execution vulnerability exists in Microsoft Office software when the…](https://agentprime.io/advisories/CVE-2018-8161.md)
  `CVE-2018-8161` · CVE record: Microsoft Microsoft Word and 3 more · No CVSS score · EPSS 0.21 · Not analysed yet · Published 9 May 2018
- [Microsoft Word: An information disclosure vulnerability exists in Outlook when a message is opened…](https://agentprime.io/advisories/CVE-2018-8160.md)
  `CVE-2018-8160` · CVE record: Microsoft Word and 1 more · No CVSS score · Not analysed yet · Published 9 May 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Office software when the…](https://agentprime.io/advisories/CVE-2018-8157.md)
  `CVE-2018-8157` · CVE record: Microsoft Microsoft Office · No CVSS score · EPSS 0.24 · Not analysed yet · Published 9 May 2018
- [Microsoft Office: A security feature bypass vulnerability exists when the Microsoft Outlook attachment…](https://agentprime.io/advisories/CVE-2018-8150.md)
  `CVE-2018-8150` · CVE record: Microsoft Microsoft Office · No CVSS score · Not analysed yet · Published 9 May 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8148.md)
  `CVE-2018-8148` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · EPSS 0.24 · Not analysed yet · Published 9 May 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Excel software when the…](https://agentprime.io/advisories/CVE-2018-8147.md)
  `CVE-2018-8147` · CVE record: Microsoft Microsoft Office and 1 more · No CVSS score · EPSS 0.24 · Not analysed yet · Published 9 May 2018
- [Microsoft Office: A remote code execution vulnerability exists in Microsoft Office software when the…](https://agentprime.io/advisories/CVE-2018-1030.md)
  `CVE-2018-1030` · CVE record: Microsoft Microsoft Office · No CVSS score · EPSS 0.24 · Not analysed yet · Published 12 Apr 2018

Newest: <https://agentprime.io/advisories/technology/microsoft-office.md>
Older: <https://agentprime.io/advisories/technology/microsoft-office.md?cursor=WyIyMDE4LTA0LTEyVDAxOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0xMDMwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-office&cursor=WyIyMDE5LTA0LTA5VDIwOjE2OjI1LjAwMDAwMFoiLCJDVkUtMjAxOS0wODIyIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-office/?cursor=WyIyMDE5LTA0LTA5VDIwOjE2OjI1LjAwMDAwMFoiLCJDVkUtMjAxOS0wODIyIl0>. Everything for agents: <https://agentprime.io/llms.txt>.