Office

CVEs (1,301)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-3234	Microsoft Word	Med	0.38	5.5	0.24	Jun 16, 2016	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1…
CVE-2021-31178	Microsoft Office	Med	0.37	5.5	0.16	May 11, 2021	Microsoft Office Information Disclosure Vulnerability
CVE-2019-0540	Microsoft Office	Med	0.37	5.5	0.13	Mar 5, 2019	A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
CVE-2018-8429	Microsoft Office	Med	0.37	5.5	0.12	Sep 13, 2018	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
CVE-2018-8382	Microsoft Office	Med	0.37	5.5	0.12	Aug 15, 2018	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
CVE-2018-8246	Microsoft Office	Med	0.37	5.5	0.17	Jun 14, 2018	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
CVE-2018-8163	Microsoft Office	Med	0.37	5.5	0.13	May 9, 2018	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Excel.
CVE-2017-11934	Microsoft Office	Med	0.37	5.5	0.13	Dec 12, 2017	Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
CVE-2017-0029	Microsoft Word	Med	0.37	5.5	0.16	Mar 17, 2017	Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."
CVE-2016-7244	Microsoft Office	Med	0.37	5.5	0.16	Nov 10, 2016	Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."
CVE-2016-3279	Microsoft Word	Med	0.37	5.5	0.16	Jul 13, 2016	Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services on SharePoint Server 2010 SP2, and…
CVE-2026-70325	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70323	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70322	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70320	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70319	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70318	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70317	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70316	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70315	Microsoft Office	Med	0.36	5.5	0.00	Aug 11, 2026	Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

CVE-2016-3234MedJun 16, 2016
Microsoft
Word
risk 0.38cvss 5.5epss 0.24
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1…
CVE-2021-31178MedMay 11, 2021
Microsoft
Office
risk 0.37cvss 5.5epss 0.16
Microsoft Office Information Disclosure Vulnerability
CVE-2019-0540MedMar 5, 2019
Microsoft
Office
risk 0.37cvss 5.5epss 0.13
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
CVE-2018-8429MedSep 13, 2018
Microsoft
Office
risk 0.37cvss 5.5epss 0.12
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
CVE-2018-8382MedAug 15, 2018
Microsoft
Office
risk 0.37cvss 5.5epss 0.12
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
CVE-2018-8246MedJun 14, 2018
Microsoft
Office
risk 0.37cvss 5.5epss 0.17
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
CVE-2018-8163MedMay 9, 2018
Microsoft
Office
risk 0.37cvss 5.5epss 0.13
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Excel.
CVE-2017-11934MedDec 12, 2017
Microsoft
Office
risk 0.37cvss 5.5epss 0.13
Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
CVE-2017-0029MedMar 17, 2017
Microsoft
Word
risk 0.37cvss 5.5epss 0.16
Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."
CVE-2016-7244MedNov 10, 2016
Microsoft
Office
risk 0.37cvss 5.5epss 0.16
Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."
CVE-2016-3279MedJul 13, 2016
Microsoft
Word
risk 0.37cvss 5.5epss 0.16
Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services on SharePoint Server 2010 SP2, and…
CVE-2026-70325MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70323MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70322MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70320MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70319MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70318MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70317MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70316MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70315MedAug 11, 2026
Microsoft
Office
risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.

Page 39 of 66