Advisories · Technology
Microsoft Office.
Every CVE that names Microsoft Office among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.
- Microsoft Office
- Microsoft 365 Apps for Enterprise for 32-bit Systems
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft O…
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
-
Microsoft Project: An information disclosure vulnerability exists when Microsoft Project reads out of bound…
- Microsoft Project
- Microsoft Office
-
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'.
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
-
A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, aka 'Microsoft Outlook Security Feature Bypass Vulnerability…
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
-
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
-
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
-
Microsoft Office: A remote code execution vulnerability exists in Microsoft Office software when the…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'.
- Microsoft Project
- Microsoft Office
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Foundation
- Microsoft SharePoint Enterprise Server
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Server
- Microsoft Office
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft SharePoint Enterprise Server
- Microsoft SharePoint Server
-
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Office: A remote code execution vulnerability exists in Microsoft Office software when the…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution Vulnerabili…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Office: A security feature bypass vulnerability exists in Microsoft Office software by not…
- Microsoft Office
-
Microsoft Office: A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R)…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Excel: A remote code execution vulnerability exists in Microsoft Excel software when the…
- Microsoft Excel
- Microsoft Office
-
Microsoft Excel: An information disclosure vulnerability exists when Microsoft Excel improperly discloses…
- Microsoft Excel
- Microsoft Office
-
Microsoft Office: An information disclosure vulnerability exists in Microsoft Office software when the…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Excel: A remote code execution vulnerability exists in Microsoft Excel software when the…
- Microsoft Excel
- Microsoft Office
-
Microsoft Excel: A remote code execution vulnerability exists in Microsoft Excel software when the…
- Microsoft Excel
- Microsoft Office
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Microsoft Excel: A remote code execution vulnerability exists in Microsoft Excel software when the…
- Microsoft Excel
- Microsoft Office
-
A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
- Microsoft Project
- Microsoft Office
-
Microsoft Excel: An information disclosure vulnerability exists when Microsoft Excel improperly discloses…
- Microsoft Excel
- Microsoft Office
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Excel: A remote code execution vulnerability exists in Microsoft Excel software when the…
- Microsoft Excel
- Microsoft Office
-
Microsoft Excel: A remote code execution vulnerability exists in Microsoft Excel software when the…
- Microsoft Excel
- Microsoft Office
-
Microsoft Office: A spoofing vulnerability exists when Microsoft Office Javascript does not check the…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters.
- Microsoft Exchange Server
- Microsoft Outlook
-
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
- Microsoft Office
- Microsoft Word
-
Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…
- Microsoft Office
-
Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Excel: A remote code execution vulnerability exists in Microsoft Excel software when the…
- Microsoft Excel
- Microsoft Office
-
Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…
- Microsoft Office
- Microsoft Office 365 ProPlus
-
Microsoft Office: A remote code execution vulnerability exists when the Microsoft Office Access…
- Microsoft Office
-
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.
- Microsoft Office
- Microsoft Office 365 ProPlus