VendorsMicrosoftofficeall versions
Vulnerabilities

Microsoft Office

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1034CVEs
CVE-2021-31178
Microsoft Office Information Disclosure Vulnerability
Published 2021-05-11 · Modified
5.5EPSS 0.160
CVE-2017-0060
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI+ Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062.
Published 2017-03-17 · Modified
5.51 PoCEPSS 0.159
CVE-2017-0029
Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."
Published 2017-03-17 · Modified
5.5EPSS 0.156
CVE-2018-8163
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Excel.
Published 2018-05-09 · Modified
5.5EPSS 0.132
CVE-2019-0540
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
Published 2019-03-06 · Modified
5.5EPSS 0.128
CVE-2017-11934
Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
Published 2017-12-12 · Modified
5.5EPSS 0.126
CVE-2018-8382
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
Published 2018-08-15 · Modified
5.5EPSS 0.123
CVE-2018-8429
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
Published 2018-09-13 · Modified
5.5EPSS 0.123
CVE-2019-1446
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
Published 2019-11-12 · Modified
5.5EPSS 0.089
CVE-2019-1112
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
Published 2019-07-29 · Modified
5.5EPSS 0.087
CVE-2019-0560
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office.
Published 2019-01-08 · Modified
5.5EPSS 0.087
CVE-2018-8627
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8598.
Published 2018-12-12 · Modified
5.5EPSS 0.086
CVE-2018-8378
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft SharePoint Server, Microsoft Office Word Viewer, Microsoft Excel Viewer, Microsoft SharePoint, Microsoft Office.
Published 2018-08-15 · Modified
5.5EPSS 0.082
CVE-2019-1464
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
Published 2019-12-10 · Modified
5.5EPSS 0.081
CVE-2019-0561
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word.
Published 2019-01-08 · Modified
5.5EPSS 0.079
CVE-2019-1263
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
Published 2019-09-11 · Modified
5.5EPSS 0.078
CVE-2020-1493
Microsoft Outlook Information Disclosure Vulnerability
Published 2020-08-17 · Modified
5.5EPSS 0.073
CVE-2020-1342
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.
Published 2020-07-14 · Modified
5.5EPSS 0.064
CVE-2020-1445
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.
Published 2020-07-14 · Modified
5.5EPSS 0.061
CVE-2020-1497
Microsoft Excel Information Disclosure Vulnerability
Published 2020-08-17 · Modified
5.5EPSS 0.046
CVE-2020-1502
Microsoft Word Information Disclosure Vulnerability
Published 2020-08-17 · Modified
5.5EPSS 0.046
CVE-2022-22716
Microsoft Excel Information Disclosure Vulnerability
Published 2022-02-09 · Modified
5.5EPSS 0.046
CVE-2020-1503
Microsoft Word Information Disclosure Vulnerability
Published 2020-08-17 · Modified
5.5EPSS 0.046
CVE-2020-16855
Microsoft Office Information Disclosure Vulnerability
Published 2020-09-11 · Modified
5.5EPSS 0.044
CVE-2020-1224
Microsoft Excel Information Disclosure Vulnerability
Published 2020-09-11 · Modified
5.5EPSS 0.044
CVE-2021-28456
Microsoft Excel Information Disclosure Vulnerability
Published 2021-04-13 · Modified
5.5EPSS 0.037
CVE-2021-31174
Microsoft Excel Information Disclosure Vulnerability
Published 2021-05-11 · Modified
5.5EPSS 0.029
CVE-2021-42295
Visual Basic for Applications Information Disclosure Vulnerability
Published 2021-12-15 · Modified
5.5EPSS 0.029
CVE-2022-29107
Microsoft Office Security Feature Bypass Vulnerability
Published 2022-05-10 · Modified
5.5EPSS 0.029
CVE-2019-1148
Microsoft Graphics Component Information Disclosure Vulnerability
Published 2019-08-14 · Modified
5.51 PoCEPSS 0.028
CVE-2019-1153
Microsoft Graphics Component Information Disclosure Vulnerability
Published 2019-08-14 · Modified
5.51 PoCEPSS 0.028
CVE-2019-1402
An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Information Disclosure Vulnerability'.
Published 2019-11-12 · Modified
5.5EPSS 0.024
CVE-2018-8427
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.
Published 2018-10-10 · Modified
5.5EPSS 0.023
CVE-2019-1463
An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1400.
Published 2019-12-10 · Modified
5.5EPSS 0.022
CVE-2019-1400
An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.
Published 2019-12-10 · Modified
5.5EPSS 0.022
CVE-2022-24462
Microsoft Word Security Feature Bypass Vulnerability
Published 2022-03-09 · Modified
5.5EPSS 0.020
CVE-2021-43255
Microsoft Office Trust Center Spoofing Vulnerability
Published 2021-12-15 · Modified
5.5EPSS 0.020
CVE-2020-17020
Microsoft Word Security Feature Bypass Vulnerability
Published 2020-11-11 · Modified
5.5EPSS 0.013
CVE-2023-36009
Microsoft Word Information Disclosure Vulnerability
Published 2023-12-12 · Modified
5.5EPSS 0.012
CVE-2024-49065
Microsoft Office Remote Code Execution Vulnerability
Published 2024-12-10 · Analyzed
5.5EPSS 0.011
← Prev24 / 26Next →