Microsoft Office vulnerabilities
27 published CVEs name Microsoft Office among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 27
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 1
Critical 0High 18Medium 9Low 0Not scored 0
CVEs per yearBy the year they were published
- 201822
- 20195
Known exploitedNewest addition to KEV first
- CVE-2019-0541
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution…
Microsoft · Microsoft Office
ExploitedHigh8.8
Newest CVEs
- CVE-2019-0585
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code…
Microsoft · Word
High8.8 - CVE-2019-0561
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure…
Microsoft · Microsoft Word
Medium5.5 - CVE-2019-0560
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information…
Microsoft · Microsoft Office
Medium5.5 - CVE-2019-0559
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information…
Microsoft · Microsoft Office
Medium6.5 - CVE-2019-0541
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution…
Microsoft · Microsoft Office
ExploitedHigh8.8 - CVE-2018-8636
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel…
Microsoft · Microsoft Office
High7.8 - CVE-2018-8628
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft…
Microsoft · Microsoft Office
High7.8 - CVE-2018-8627
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose…
Microsoft · Microsoft Office
Medium5.5 - CVE-2018-8598
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information…
Microsoft · Microsoft Office
Medium4.7 - CVE-2018-8597
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel…
Microsoft · Microsoft Office
High7.8