Known vulnerabilities in Microsoft Office 2007 - page 5

Vendor: Microsoft
Software: Microsoft Office
Version: 2007
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 129
Public exploits: 30
Known exploited (KEV): 26
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office version 2007 Microsoft Office 2007 is affected by 129 vulnerabilities: 18 critical, 98 high, 2 medium, 11 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU5561 - Missing release of memory after effective lifetime
CVE-2015-2375		 CWE-401 Low
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5560 - Untrusted Search Path
CVE-2015-2378		 CWE-426 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5559 - Heap-based Buffer Overflow
CVE-2015-2424		 CWE-122 Critical
No
Exploited
 - 31.01.2017 SB2015063001
SB2015071405
#VU5558 - Memory corruption
CVE-2015-2415		 CWE-119 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5557 - Memory corruption
CVE-2015-2380		 CWE-119 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5556 - Memory corruption
CVE-2015-2379		 CWE-119 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5555 - Memory corruption
CVE-2015-2377		 CWE-119 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5554 - Memory corruption
CVE-2015-2376		 CWE-119 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5466 - Use After Free
CVE-2015-1651		 CWE-416 High
No
No
 - 27.01.2017 SB2015041401
SB2015041402
#VU5465 - Use After Free
CVE-2015-1650		 CWE-416 High
No
No
 - 27.01.2017 SB2015041401
SB2015041402
#VU5464 - Use After Free
CVE-2015-1649		 CWE-416 High
No
No
 - 27.01.2017 SB2015041401
SB2015041402
#VU5209 - Permissions, Privileges, and Access Controls
CVE-2014-1809		 CWE-264 Critical
No
No
 - 20.01.2017 SB2014051304
#VU5190 - Memory corruption
CVE-2014-1757		 CWE-119 High
No
No
 - 20.01.2017 SB2014032401
#VU5188 - Memory corruption
CVE-2014-1761		 CWE-119 Critical
Public exploit available
Exploited
 - 20.01.2017 SB2014032401
#VU4356 - Memory corruption
CVE-2013-3906		 CWE-119 Critical
Public exploit available
Exploited
 - 12.01.2017 SB2013110501
#VU4346 - Permissions, Privileges, and Access Controls
CVE-2013-5057		 CWE-264 High
No
No
 - 12.01.2017 SB2013121003
#VU4236 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2520		 CWE-79 Medium
No
No
 - 11.01.2017 SB2012100901
#VU4087 - Untrusted Search Path
CVE-2012-1854		 CWE-426 Critical
No
Exploited
 - 10.01.2017 SB2012071001
#VU3043 - Memory corruption
CVE-2012-1856		 CWE-119 Critical
No
Exploited
 - 29.12.2016 SB2012081402
#VU2995 - Heap-based Buffer Overflow
CVE-2012-0167		 CWE-122 High
No
No
 - 28.12.2016 SB2012050802


Showing elements 81 - 100 out of 129