Known vulnerabilities in Microsoft Office 2013 RT Service Pack 1

Vendor: Microsoft
Software: Microsoft Office
Version: 2013 RT Service Pack 1
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 17
Public exploits: 3
Known exploited (KEV): 5
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office version 2013 RT Service Pack 1 Microsoft Office 2013 RT Service Pack 1 is affected by 17 vulnerabilities: 3 critical, 9 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80723 - Security Features
CVE-2023-36767		 CWE-254 Low
No
No
 - 13.09.2023 SB2023091318
#VU80655 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36761		 CWE-200 High
No
Exploited
 - 12.09.2023 SB2023091249
#VU79575 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36769		 CWE-451 Medium
No
No
 - 16.08.2023 SB2023081611
#VU79168 - Improper input validation
CVE-2023-36895		 CWE-20 High
No
No
 - 08.08.2023 SB2023080874
#VU79148 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36893		 CWE-451 Medium
No
No
 - 08.08.2023 SB2023080866
#VU78200 - Improper input validation
CVE-2023-33153		 CWE-20 Medium
No
No
 - 12.07.2023 SB2023071265
#VU78192 - Improper input validation
CVE-2023-33152		 CWE-20 High
No
No
 - 12.07.2023 SB2023071258
#VU78099 - Improper input validation
CVE-2023-36884		 CWE-20 Critical
Public exploit available
Exploited
 - 11.07.2023 SB2023071170
#VU78096 - Improper input validation
CVE-2023-35311		 CWE-20 Critical
No
Exploited
 - 11.07.2023 SB2023071167
#VU78071 - Improper input validation
CVE-2023-33149		 CWE-20 High
No
No
 - 11.07.2023 SB2023071159
#VU73511 - Exposure of sensitive information to an unauthorized actor
CVE-2023-23397		 CWE-200 Critical
Public exploit available
Exploited
 - 14.03.2023 SB2023031428
#VU72192 - Memory corruption
CVE-2023-21716		 CWE-119 High
Public exploit available
Exploited
 - 14.02.2023 SB2023021433
#VU68151 - Use After Free
CVE-2022-38048		 CWE-416 High
No
No
 - 11.10.2022 SB2022101155
#VU67265 - Use After Free
CVE-2022-37962		 CWE-416 High
No
No
 - 13.09.2022 SB2022091366
#VU66308 - Improper input validation
CVE-2022-34717		 CWE-20 High
No
No
 - 09.08.2022 SB2022080939
#VU65217 - Security Features
CVE-2022-33632		 CWE-254 Medium
No
No
 - 12.07.2022 SB2022071262
#VU62095 - Use After Free
CVE-2022-26901		 CWE-416 High
No
No
 - 12.04.2022 SB2022041224