Microsoft Office (Microsoft) - vulnerabilities (CVEs)

125 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2020-07-14. Vendor: Microsoft.

CVEs of Microsoft Office

• CVE-2020-1448 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
• CVE-2020-1449 - CVSS 7.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft…
• CVE-2020-1445 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information…
• CVE-2020-1447 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
• CVE-2020-1446 - CVSS 8.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
• CVE-2020-1409 - CVSS 7.8 (high), 2020-07-14: A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
• CVE-2020-1349 - CVSS 7.8 (high), 2020-07-14: A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote…
• CVE-2020-1342 - CVSS 5.5 (medium), 2020-07-14: An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose…
• CVE-2020-1322 - CVSS 6.5 (medium), 2020-06-09: An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project…
• CVE-2020-1321 - CVSS 8.8 (high), 2020-06-09: A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office Remote…
• CVE-2020-1229 - CVSS 4.3 (medium), 2020-06-09: A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, aka 'Microsoft…
• CVE-2020-1226 - CVSS 8.8 (high), 2020-06-09: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2020-1225 - CVSS 8.8 (high), 2020-06-09: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2020-0991 - CVSS 7.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office…
• CVE-2020-0980 - CVSS 7.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
• CVE-2020-0961 - CVSS 7.8 (high), 2020-04-15: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2020-0906 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2020-0760 - CVSS 8.8 (high), 2020-04-15: A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution…
• CVE-2020-0892 - CVSS 7.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
• CVE-2020-0852 - CVSS 7.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
• CVE-2020-0851 - CVSS 7.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
• CVE-2020-0850 - CVSS 8.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
• CVE-2020-0855 - CVSS 7.8 (high), 2020-03-12: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
• CVE-2020-0759 - CVSS 8.8 (high), 2020-02-11: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2020-0696 - CVSS 6.5 (medium), 2020-02-11: A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook…
• CVE-2020-0651 - CVSS 7.8 (high), 2020-01-14: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2020-0650 - CVSS 7.8 (high), 2020-01-14: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2020-0652 - CVSS 7.8 (high), 2020-01-14: A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office…
• CVE-2019-1462 - CVSS 7.8 (high), 2019-12-10: A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft…
• CVE-2019-1461 - CVSS 6.5 (medium), 2019-12-10: A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial…
• CVE-2019-1464 - CVSS 5.5 (medium), 2019-12-10: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information…
• CVE-2019-1463 - CVSS 5.5 (medium), 2019-12-10: An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft…
• CVE-2019-1400 - CVSS 5.5 (medium), 2019-12-10: An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft…
• CVE-2019-1457 - CVSS 7.8 (high), 2019-11-12: A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka 'Microsoft Office Excel…
• CVE-2019-1449 - CVSS 9.8 (critical), 2019-11-12: A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a…
• CVE-2019-1446 - CVSS 5.5 (medium), 2019-11-12: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information…
• CVE-2019-1448 - CVSS 7.8 (high), 2019-11-12: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2019-1402 - CVSS 5.5 (medium), 2019-11-12: An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft…
• CVE-2019-1327 - CVSS 8.8 (high), 2019-10-10: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2019-1331 - CVSS 8.8 (high), 2019-10-10: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2019-1297 - CVSS 8.8 (high), 2019-09-11: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2019-1263 - CVSS 5.5 (medium), 2019-09-11: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information…
• CVE-2019-1264 - CVSS 7.8 (high), 2019-09-11: A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
• CVE-2019-1246 - CVSS 7.8 (high), 2019-09-11: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code…
• CVE-2019-1110 - CVSS 8.8 (high), 2019-07-15: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2019-1109 - CVSS 9.1 (critical), 2019-07-15: A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker…
• CVE-2019-1112 - CVSS 5.5 (medium), 2019-07-15: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information…
• CVE-2019-1111 - CVSS 8.8 (high), 2019-07-15: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2019-1084 - CVSS 6.5 (medium), 2019-07-15: An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated…
• CVE-2019-0953 - CVSS 7.8 (high), 2019-05-16: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code…
• CVE-2019-0947 - CVSS 7.8 (high), 2019-05-16: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0946 - CVSS 7.8 (high), 2019-05-16: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0945 - CVSS 7.8 (high), 2019-05-16: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0823 - CVSS 7.8 (high), 2019-04-09: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0826 - CVSS 7.8 (high), 2019-04-09: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0822 - CVSS 7.8 (high), 2019-04-09: A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote…
• CVE-2019-0825 - CVSS 7.8 (high), 2019-04-09: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0828 - CVSS 7.8 (high), 2019-04-09: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel…
• CVE-2019-0824 - CVSS 7.8 (high), 2019-04-09: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0827 - CVSS 7.8 (high), 2019-04-09: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0801 - CVSS 7.8 (high), 2019-04-09: A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have…
• CVE-2019-0748 - CVSS 7.8 (high), 2019-04-09: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0672 - CVSS 7.8 (high), 2019-03-05: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0675 - CVSS 7.8 (high), 2019-03-05: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0671 - CVSS 7.8 (high), 2019-03-05: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0674 - CVSS 7.8 (high), 2019-03-05: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0669 - CVSS 6.5 (medium), 2019-03-05: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information…
• CVE-2019-0673 - CVSS 7.8 (high), 2019-03-05: A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office…
• CVE-2019-0540 - CVSS 5.5 (medium), 2019-03-05: A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which…
• CVE-2019-0585 - CVSS 8.8 (high), 2019-01-08: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code…
• CVE-2019-0560 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information…
• CVE-2019-0559 - CVSS 6.5 (medium), 2019-01-08: An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information…
• CVE-2019-0561 - CVSS 5.5 (medium), 2019-01-08: An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure…
• CVE-2019-0541 - CVSS 8.8 (high), 2019-01-08: A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution…
• CVE-2018-8636 - CVSS 7.8 (high), 2018-12-12: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel…
• CVE-2018-8628 - CVSS 7.8 (high), 2018-12-12: A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft…
• CVE-2018-8627 - CVSS 5.5 (medium), 2018-12-12: An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose…
• CVE-2018-8597 - CVSS 7.8 (high), 2018-12-12: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel…
• CVE-2018-8587 - CVSS 7.8 (high), 2018-12-12: A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote…
• CVE-2018-8598 - CVSS 4.7 (medium), 2018-12-12: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information…
• CVE-2018-8574 - CVSS 7.8 (high), 2018-11-14: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel…
• CVE-2018-8579 - CVSS 6.5 (medium), 2018-11-14: An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This…
• CVE-2018-8573 - CVSS 7.8 (high), 2018-11-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code…
• CVE-2018-8577 - CVSS 7.8 (high), 2018-11-14: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel…
• CVE-2018-8558 - CVSS 6.5 (medium), 2018-11-14: An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin…
• CVE-2018-8576 - CVSS 7.8 (high), 2018-11-14: A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote…
• CVE-2018-8582 - CVSS 8.8 (high), 2018-11-14: A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code…
• CVE-2018-8522 - CVSS 7.8 (high), 2018-11-14: A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote…
• CVE-2018-8546 - CVSS 5.9 (medium), 2018-11-14: A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365…
• CVE-2018-8539 - CVSS 7.8 (high), 2018-11-14: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code…
• CVE-2018-8524 - CVSS 7.8 (high), 2018-11-14: A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote…
• CVE-2018-8504 - CVSS 8.8 (high), 2018-10-10: A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft…
• CVE-2018-8502 - CVSS 8.8 (high), 2018-10-10: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft…
• CVE-2018-8501 - CVSS 8.8 (high), 2018-10-10: A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka…
• CVE-2018-8432 - CVSS 7.8 (high), 2018-10-10: A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote…
• CVE-2018-8427 - CVSS 5.5 (medium), 2018-10-10: An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components…
• CVE-2018-8429 - CVSS 5.5 (medium), 2018-09-13: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information…
• CVE-2018-8430 - CVSS 7.8 (high), 2018-09-13: A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execution…
• CVE-2018-8332 - CVSS 8.8 (high), 2018-09-13: A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote…
• CVE-2018-8331 - CVSS 7.8 (high), 2018-09-13: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel…