Office Visio
by Microsoft
CVEs (420)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-21413 | Cri | 0.83 | 9.8 | 0.95 | KEV | Feb 13, 2024 | Microsoft Outlook Remote Code Execution Vulnerability | |
| CVE-2023-23397 | Cri | 0.83 | 9.8 | 0.97 | KEV | Mar 14, 2023 | Microsoft Outlook Elevation of Privilege Vulnerability | |
| CVE-2019-0541 | Hig | 0.76 | 8.8 | 0.53 | KEV | Jan 8, 2019 | A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft… | |
| CVE-2019-1297 | Hig | 0.71 | 8.8 | 0.22 | KEV | Sep 11, 2019 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. | |
| CVE-2024-38189 | Hig | 0.70 | 8.8 | 0.08 | KEV | Aug 13, 2024 | Microsoft Project Remote Code Execution Vulnerability | |
| CVE-2023-35311 | Hig | 0.70 | 8.8 | 0.16 | KEV | Jul 11, 2023 | Microsoft Outlook Security Feature Bypass Vulnerability | |
| CVE-2023-21716 | Cri | 0.70 | 9.8 | 0.82 | Feb 14, 2023 | Microsoft Word Remote Code Execution Vulnerability | ||
| CVE-2026-21509 | Hig | 0.68 | 7.8 | 0.72 | KEV | Jan 26, 2026 | Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. | |
| CVE-2020-0901 | Cri | 0.65 | 9.8 | 0.04 | May 21, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is… | ||
| CVE-2019-1449 | Cri | 0.64 | 9.8 | 0.06 | Nov 12, 2019 | A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this… | ||
| CVE-2023-33150 | Cri | 0.63 | 9.6 | 0.02 | Jul 11, 2023 | Microsoft Office Security Feature Bypass Vulnerability | ||
| CVE-2023-33131 | Hig | 0.61 | 8.8 | 0.06 | Jun 14, 2023 | Microsoft Outlook Remote Code Execution Vulnerability | ||
| CVE-2018-1026 | Hig | 0.61 | 8.8 | 0.42 | Apr 12, 2018 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-1030. | ||
| CVE-2024-38226 | Hig | 0.60 | 7.3 | 0.03 | KEV | Sep 10, 2024 | Microsoft Publisher Security Feature Bypass Vulnerability | |
| CVE-2020-1226 | Hig | 0.59 | 8.8 | 0.17 | Jun 9, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225. | ||
| CVE-2020-1225 | Hig | 0.59 | 8.8 | 0.17 | Jun 9, 2020 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226. | ||
| CVE-2019-1331 | Hig | 0.59 | 8.8 | 0.19 | Oct 10, 2019 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327. | ||
| CVE-2019-1109 | Cri | 0.59 | 9.1 | 0.04 | Jul 15, 2019 | A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update… | ||
| CVE-2019-0585 | Hig | 0.59 | 8.8 | 0.22 | Jan 8, 2019 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft… | ||
| CVE-2018-8582 | Hig | 0.59 | 8.8 | 0.19 | Nov 14, 2018 | A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique… |
- risk 0.83cvss 9.8epss 0.95
Microsoft Outlook Remote Code Execution Vulnerability
- risk 0.83cvss 9.8epss 0.97
Microsoft Outlook Elevation of Privilege Vulnerability
- risk 0.76cvss 8.8epss 0.53
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft…
- risk 0.71cvss 8.8epss 0.22
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
- risk 0.70cvss 8.8epss 0.08
Microsoft Project Remote Code Execution Vulnerability
- risk 0.70cvss 8.8epss 0.16
Microsoft Outlook Security Feature Bypass Vulnerability
- risk 0.70cvss 9.8epss 0.82
Microsoft Word Remote Code Execution Vulnerability
- risk 0.68cvss 7.8epss 0.72
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally.
- risk 0.65cvss 9.8epss 0.04
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is…
- risk 0.64cvss 9.8epss 0.06
A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this…
- risk 0.63cvss 9.6epss 0.02
Microsoft Office Security Feature Bypass Vulnerability
- risk 0.61cvss 8.8epss 0.06
Microsoft Outlook Remote Code Execution Vulnerability
- risk 0.61cvss 8.8epss 0.42
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-1030.
- risk 0.60cvss 7.3epss 0.03
Microsoft Publisher Security Feature Bypass Vulnerability
- risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.
- risk 0.59cvss 8.8epss 0.17
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.
- risk 0.59cvss 8.8epss 0.19
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.
- risk 0.59cvss 9.1epss 0.04
A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update…
- risk 0.59cvss 8.8epss 0.22
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft…
- risk 0.59cvss 8.8epss 0.19
A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique…
Page 1 of 21