Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Office
Total 827 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-41103 1 Microsoft 7 365 Apps, Office, Office Online Server and 4 more 2023-03-10 N/A 5.5 MEDIUM
Microsoft Word Information Disclosure Vulnerability
CVE-2022-41061 1 Microsoft 7 365 Apps, Office, Office Online Server and 4 more 2023-03-10 N/A 7.8 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41060 1 Microsoft 7 365 Apps, Office, Office Online Server and 4 more 2023-03-10 N/A 5.5 MEDIUM
Microsoft Word Information Disclosure Vulnerability
CVE-2020-1349 1 Microsoft 3 365 Apps, Office, Outlook 2023-01-31 6.8 MEDIUM 7.8 HIGH
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.
CVE-2021-43875 1 Microsoft 2 365 Apps, Office 2022-07-12 6.8 MEDIUM 7.8 HIGH
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-42293 1 Microsoft 2 365 Apps, Office 2022-07-12 5.0 MEDIUM 6.5 MEDIUM
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability
CVE-2008-3471 1 Microsoft 5 Excel, Excel Viewer, Office and 2 more 2022-02-09 9.3 HIGH N/A
Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a BIFF file with a malformed record that triggers a user-influenced size calculation, aka "File Format Parsing Vulnerability."
CVE-2008-4019 1 Microsoft 6 Excel, Excel Viewer, Office and 3 more 2022-02-09 9.3 HIGH N/A
Integer overflow in the REPT function in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel Viewer 2003 SP3; Office Excel Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office SharePoint Server 2007 Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file containing a formula within a cell, aka "Formula Parsing Vulnerability."
CVE-2021-43905 1 Microsoft 1 Office 2022-01-01 6.8 MEDIUM 9.6 CRITICAL
Microsoft Office app Remote Code Execution Vulnerability
CVE-2021-43256 1 Microsoft 6 365 Apps, Excel, Excel Rt and 3 more 2022-01-01 6.8 MEDIUM 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-43255 1 Microsoft 2 365 Apps, Office 2022-01-01 4.3 MEDIUM 5.5 MEDIUM
Microsoft Office Trust Center Spoofing Vulnerability
CVE-2010-0243 2 Apple, Microsoft 2 Macos, Office 2021-09-22 9.3 HIGH N/A
Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka "MSO.DLL Buffer Overflow."
CVE-2008-3013 1 Microsoft 13 Digital Image Suite, Forefront Client Security, Internet Explorer and 10 more 2021-07-23 9.3 HIGH N/A
gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2, Report Viewer 2005 SP1 and 2008, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a malformed GIF image file containing many extension markers for graphic control extensions and subsequent unknown labels, aka "GDI+ GIF Parsing Vulnerability."
CVE-2020-0855 1 Microsoft 2 Office, Office 365 Proplus 2021-07-21 9.3 HIGH 7.8 HIGH
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0892.
CVE-2020-0906 1 Microsoft 3 Excel, Office, Office 365 Proplus 2021-07-21 9.3 HIGH 8.8 HIGH
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979.
CVE-2020-0850 1 Microsoft 7 Office, Office 365 Proplus, Office Online Server and 4 more 2021-07-21 6.8 MEDIUM 8.8 HIGH
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.
CVE-2020-1226 1 Microsoft 3 365 Apps, Excel, Office 2021-07-21 9.3 HIGH 8.8 HIGH
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.
CVE-2020-1447 1 Microsoft 8 365 Apps, Office, Office Online Server and 5 more 2021-07-21 6.8 MEDIUM 8.8 HIGH
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.
CVE-2020-0980 1 Microsoft 7 Office, Office 365 Proplus, Office Online Server and 4 more 2021-07-21 9.3 HIGH 7.8 HIGH
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
CVE-2020-1229 1 Microsoft 3 365 Apps, Office, Word 2021-07-21 4.3 MEDIUM 4.3 MEDIUM
A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.