Microsoft Office (Microsoft Corporation) - vulnerabilities (CVEs)

45 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-03-14. Vendor: Microsoft Corporation.

CVEs of Microsoft Office

• CVE-2018-0922 - CVSS 7.8 (high), 2018-03-14: Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2,…
• CVE-2018-0919 - CVSS 3.3 (low), 2018-03-14: Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft…
• CVE-2018-0852 - CVSS 8.8 (high), 2018-02-15: Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run…
• CVE-2018-0851 - CVSS 8.8 (high), 2018-02-15: Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft…
• CVE-2018-0853 - CVSS 3.3 (low), 2018-02-15: Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information…
• CVE-2018-0841 - CVSS 8.8 (high), 2018-02-15: Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution…
• CVE-2018-0797 - CVSS 7.8 (high), 2018-01-10: Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka…
• CVE-2018-0795 - CVSS 8.8 (high), 2018-01-10: Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in…
• CVE-2017-11935 - CVSS 7.8 (high), 2017-12-12: Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote…
• CVE-2017-11939 - CVSS 6.5 (medium), 2017-12-12: Microsoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions,…
• CVE-2017-11934 - CVSS 5.5 (medium), 2017-12-12: Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain…
• CVE-2017-11878 - CVSS 7.8 (high), 2017-11-15: Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1,…
• CVE-2017-11877 - CVSS 5.5 (medium), 2017-11-15: Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1,…
• CVE-2017-11884 - CVSS 7.8 (high), 2017-11-15: Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in…
• CVE-2017-11854 - CVSS 8.8 (high), 2017-11-15: Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service…
• CVE-2017-11882 - CVSS 7.8 (high), 2017-11-15: Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker…
• CVE-2017-11826 - CVSS 7.8 (high), 2017-10-13: Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word…
• CVE-2017-8743 - CVSS 7.8 (high), 2017-09-13: A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they…
• CVE-2017-8742 - CVSS 7.8 (high), 2017-09-13: A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013…
• CVE-2017-8745 - CVSS 5.4 (medium), 2017-09-13: An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted…
• CVE-2017-8725 - CVSS 7.8 (high), 2017-09-13: A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly…
• CVE-2017-8744 - CVSS 7.8 (high), 2017-09-13: A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013…
• CVE-2017-8567 - CVSS 7.8 (high), 2017-09-13: A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory, aka "Microsoft Office Remote…
• CVE-2017-8632 - CVSS 7.8 (high), 2017-09-13: A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack…
• CVE-2017-8631 - CVSS 7.8 (high), 2017-09-13: A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013…
• CVE-2017-8630 - CVSS 7.8 (high), 2017-09-13: Microsoft Office 2016 allows a remote code execution vulnerability when it fails to properly handle objects in memory, aka "Microsoft Office Memory Corruption…
• CVE-2017-8654 - CVSS 5.4 (medium), 2017-08-08: Microsoft SharePoint Server 2010 Service Pack 2 allows a cross-site scripting (XSS) vulnerability when it does not properly sanitize a specially crafted web…
• CVE-2017-8571 - CVSS 7.8 (high), 2017-08-01: Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security…
• CVE-2017-8663 - CVSS 7.8 (high), 2017-08-01: Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote code…
• CVE-2017-8572 - CVSS 5.5 (medium), 2017-08-01: Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows an information…
• CVE-2017-8507 - CVSS 7.8 (high), 2017-06-15: A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Office Memory…
• CVE-2017-8510 - CVSS 8.8 (high), 2017-06-15: A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code…
• CVE-2017-8506 - CVSS 7.8 (high), 2017-06-15: A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code…
• CVE-2017-8509 - CVSS 8.8 (high), 2017-06-15: A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code…
• CVE-2017-8512 - CVSS 8.8 (high), 2017-06-15: A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code…
• CVE-2017-8508 - CVSS 5.5 (medium), 2017-06-15: A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka "Microsoft Office…
• CVE-2017-8511 - CVSS 7.8 (high), 2017-06-15: A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code…
• CVE-2017-0260 - CVSS 7.8 (high), 2017-06-15: A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code…
• CVE-2017-0281 - CVSS 7.8 (high), 2017-05-12: Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1,…
• CVE-2017-0262 - CVSS 7.8 (high), 2017-05-12: Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in…
• CVE-2017-0265 - CVSS 7.8 (high), 2017-05-12: Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft…
• CVE-2017-0264 - CVSS 7.8 (high), 2017-05-12: Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft…
• CVE-2017-0261 - CVSS 7.8 (high), 2017-05-12: Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in…
• CVE-2017-0255 - CVSS 5.4 (medium), 2017-05-12: Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request,…
• CVE-2017-0254 - CVSS 7.8 (high), 2017-05-12: Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010…