Known vulnerabilities in Microsoft Office 2019 for Mac - page 2

Vendor: Microsoft
Software: Microsoft Office
Version: 2019 for Mac
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 123
Public exploits: 4
Known exploited (KEV): 3
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office version 2019 for Mac Microsoft Office 2019 for Mac is affected by 123 vulnerabilities: 1 critical, 92 high, 16 medium, 14 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69139 - Improper input validation
CVE-2022-41107		 CWE-20 High
No
No
 - 09.11.2022 SB2022110903
#VU69085 - Improper input validation
CVE-2022-41061		 CWE-20 High
No
No
 - 08.11.2022 SB2022110818
#VU68222 - Improper input validation
CVE-2022-41031		 CWE-20 High
No
No
 - 12.10.2022 SB2022101215
#VU68154 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41043		 CWE-200 Low
No
No
 - 11.10.2022 SB2022101155
#VU68151 - Use After Free
CVE-2022-38048		 CWE-416 High
No
No
 - 11.10.2022 SB2022101155
#VU67265 - Use After Free
CVE-2022-37962		 CWE-416 High
No
No
 - 13.09.2022 SB2022091366
#VU62096 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24473		 CWE-94 High
No
No
 - 12.04.2022 SB2022041224
#VU62095 - Use After Free
CVE-2022-26901		 CWE-416 High
No
No
 - 12.04.2022 SB2022041224
#VU61180 - Improper input validation
CVE-2022-24511		 CWE-20 Medium
No
No
 - 08.03.2022 SB2022030852
#VU60420 - Exposure of sensitive information to an unauthorized actor
CVE-2022-22716		 CWE-200 Low
No
No
 - 08.02.2022 SB2022020841
#VU60393 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22003		 CWE-94 High
No
No
 - 08.02.2022 SB2022020831
#VU59477 - Memory corruption
CVE-2022-21841		 CWE-119 High
No
No
 - 11.01.2022 SB2022011160
#VU59476 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21840		 CWE-94 High
No
No
 - 11.01.2022 SB2022011159
#VU58924 - Integer overflow
CVE-2021-43875		 CWE-190 High
No
No
 - 14.12.2021 SB2021121452
#VU58070 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40442		 CWE-94 High
No
No
 - 09.11.2021 SB2021110941
#VU58058 - Improper input validation
CVE-2021-42292		 CWE-20 Critical
No
Exploited
 - 09.11.2021 SB2021110931
#VU57300 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40454		 CWE-200 Low
No
No
 - 12.10.2021 SB2021101241
SB2022111615
#VU57264 - Use After Free
CVE-2021-40474		 CWE-416 High
Public exploit available
No
 - 12.10.2021 SB2021101217
#VU57262 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40485		 CWE-94 High
No
No
 - 12.10.2021 SB2021101217
#VU56573 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-38655		 CWE-94 High
No
No
 - 14.09.2021 SB2021091443


Showing elements 21 - 40 out of 123