Microsoft Office
27 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-0585 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 8.8 | 22 % | ||
| CVE-2019-0561 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclo | MEDIUM 5.5 | 7.9 % | ||
| CVE-2019-0560 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office | MEDIUM 5.5 | 8.7 % | ||
| CVE-2019-0559 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook I | MEDIUM 6.5 | 6.8 % | ||
| CVE-2019-0541 | | A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Ex | HIGH 8.8 | 53 % | KEV | |
| CVE-2018-8636 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 16 % | ||
| CVE-2018-8628 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, | HIGH 7.8 | 16 % | ||
| CVE-2018-8627 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, whi | MEDIUM 5.5 | 8.6 % | ||
| CVE-2018-8598 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel In | MEDIUM 4.7 | 6.2 % | ||
| CVE-2018-8597 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 16 % | ||
| CVE-2018-8587 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof | HIGH 7.8 | 29 % | ||
| CVE-2018-8582 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft O | HIGH 8.8 | 19 % | ||
| CVE-2018-8579 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulne | MEDIUM 6.5 | 6.3 % | ||
| CVE-2018-8577 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 19 % | ||
| CVE-2018-8576 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof | HIGH 7.8 | 19 % | ||
| CVE-2018-8575 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsof | HIGH 7.8 | 20 % | ||
| CVE-2018-8574 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka " | HIGH 7.8 | 19 % | ||
| CVE-2018-8573 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft W | HIGH 7.8 | 19 % | ||
| CVE-2018-8558 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the Share | MEDIUM 6.5 | 5.6 % | ||
| CVE-2018-8546 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This aff | MEDIUM 5.9 | 5.5 % | ||
| CVE-2018-8524 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof | HIGH 7.8 | 19 % | ||
| CVE-2018-8522 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsof | HIGH 7.8 | 19 % | ||
| CVE-2018-8504 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View | HIGH 8.8 | 20 % | ||
| CVE-2018-8502 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected Vie | HIGH 8.8 | 20 % | ||
| CVE-2018-8501 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protecte | HIGH 8.8 | 20 % | ||
| CVE-2018-8432 | | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics | HIGH 7.8 | 20 % | ||
| CVE-2018-8427 | 365 ProPlus for 32-bit Systems ; 365 ProPlus for 64-bit Systems | An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphi | MEDIUM 5.5 | 2.3 % |