Office Web Apps
by Microsoft
CVEs (120)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-31175 | 0.01 | — | 0.03 | May 11, 2021 | Microsoft Office Remote Code Execution Vulnerability | |||
| CVE-2021-28456 | 0.01 | — | 0.04 | Apr 13, 2021 | Microsoft Excel Information Disclosure Vulnerability | |||
| CVE-2021-28454 | 0.01 | — | 0.03 | Apr 13, 2021 | Microsoft Excel Remote Code Execution Vulnerability | |||
| CVE-2021-28453 | 0.01 | — | 0.04 | Apr 13, 2021 | Microsoft Word Remote Code Execution Vulnerability | |||
| CVE-2021-28451 | 0.01 | — | 0.02 | Apr 13, 2021 | Microsoft Excel Remote Code Execution Vulnerability | |||
| CVE-2021-24070 | 0.01 | — | 0.02 | Feb 25, 2021 | Microsoft Excel Remote Code Execution Vulnerability | |||
| CVE-2021-24067 | 0.01 | — | 0.02 | Feb 25, 2021 | Microsoft Excel Remote Code Execution Vulnerability | |||
| CVE-2021-1716 | 0.01 | — | 0.04 | Jan 12, 2021 | Microsoft Word Remote Code Execution Vulnerability | |||
| CVE-2021-1713 | 0.01 | — | 0.03 | Jan 12, 2021 | Microsoft Excel Remote Code Execution Vulnerability | |||
| CVE-2020-17064 | 0.01 | — | 0.03 | Nov 11, 2020 | Microsoft Excel Remote Code Execution Vulnerability | |||
| CVE-2020-17065 | 0.01 | — | 0.04 | Nov 11, 2020 | Microsoft Excel Remote Code Execution Vulnerability | |||
| CVE-2020-16932 | 0.01 | — | 0.04 | Oct 16, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is… | |||
| CVE-2020-16931 | 0.01 | — | 0.04 | Oct 16, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is… | |||
| CVE-2020-16929 | 0.01 | — | 0.03 | Oct 16, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is… | |||
| CVE-2020-1335 | 0.01 | — | 0.04 | Sep 11, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is… | |||
| CVE-2020-1218 | 0.01 | — | 0.04 | Sep 11, 2020 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current… | |||
| CVE-2019-1201 | 0.01 | — | 0.05 | Aug 14, 2019 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user.… | |||
| CVE-2015-6037 | 0.01 | — | 0.10 | Oct 14, 2015 | Cross-site scripting (XSS) vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject… | |||
| CVE-2015-0086 | 0.01 | — | 0.15 | Mar 11, 2015 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web… | |||
| CVE-2014-1754 | 0.01 | — | 0.11 | May 14, 2014 | Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script… |
- CVE-2021-31175May 11, 2021risk 0.01cvss —epss 0.03
Microsoft Office Remote Code Execution Vulnerability
- CVE-2021-28456Apr 13, 2021risk 0.01cvss —epss 0.04
Microsoft Excel Information Disclosure Vulnerability
- CVE-2021-28454Apr 13, 2021risk 0.01cvss —epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2021-28453Apr 13, 2021risk 0.01cvss —epss 0.04
Microsoft Word Remote Code Execution Vulnerability
- CVE-2021-28451Apr 13, 2021risk 0.01cvss —epss 0.02
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2021-24070Feb 25, 2021risk 0.01cvss —epss 0.02
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2021-24067Feb 25, 2021risk 0.01cvss —epss 0.02
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2021-1716Jan 12, 2021risk 0.01cvss —epss 0.04
Microsoft Word Remote Code Execution Vulnerability
- CVE-2021-1713Jan 12, 2021risk 0.01cvss —epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2020-17064Nov 11, 2020risk 0.01cvss —epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2020-17065Nov 11, 2020risk 0.01cvss —epss 0.04
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2020-16932Oct 16, 2020risk 0.01cvss —epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
- CVE-2020-16931Oct 16, 2020risk 0.01cvss —epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
- CVE-2020-16929Oct 16, 2020risk 0.01cvss —epss 0.03
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
- CVE-2020-1335Sep 11, 2020risk 0.01cvss —epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
- CVE-2020-1218Sep 11, 2020risk 0.01cvss —epss 0.04
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current…
- CVE-2019-1201Aug 14, 2019risk 0.01cvss —epss 0.05
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user.…
- CVE-2015-6037Oct 14, 2015risk 0.01cvss —epss 0.10
Cross-site scripting (XSS) vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, and SharePoint Foundation 2013 SP1 allows remote authenticated users to inject…
- CVE-2015-0086Mar 11, 2015risk 0.01cvss —epss 0.15
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web…
- CVE-2014-1754May 14, 2014risk 0.01cvss —epss 0.11
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script…
Page 5 of 6