Show filters
439 Total Results
Displaying 11-20 of 439
Sort by:
Attacker Value
Very High

CVE-2017-0199

Disclosure Date: April 12, 2017 (last updated July 25, 2024)
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."
Attacker Value
Unknown

CVE-2015-2545

Disclosure Date: September 09, 2015 (last updated July 17, 2024)
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed EPS File Vulnerability."
Attacker Value
Unknown

CVE-2015-1642

Disclosure Date: August 15, 2015 (last updated July 17, 2024)
Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Attacker Value
Unknown

CVE-2015-2424

Disclosure Date: July 14, 2015 (last updated July 17, 2024)
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Attacker Value
High

CVE-2023-33137

Disclosure Date: June 14, 2023 (last updated January 11, 2025)
Microsoft Excel Remote Code Execution Vulnerability
Attacker Value
High

CVE-2022-21840

Disclosure Date: January 11, 2022 (last updated December 21, 2023)
Microsoft Office Remote Code Execution Vulnerability
Attacker Value
Unknown

CVE-2017-11826

Disclosure Date: October 13, 2017 (last updated July 17, 2024)
Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.
Attacker Value
Unknown

CVE-2017-0261

Disclosure Date: May 12, 2017 (last updated July 17, 2024)
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0262 and CVE-2017-0281.
Attacker Value
Unknown

CVE-2017-0262

Disclosure Date: May 12, 2017 (last updated February 12, 2025)
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0281.
Attacker Value
Unknown

CVE-2016-7193

Disclosure Date: October 14, 2016 (last updated July 25, 2024)
Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted RTF document, aka "Microsoft Office Memory Corruption Vulnerability."