Known vulnerabilities in Microsoft Office 2019 - page 11

Vendor: Microsoft
Software: Microsoft Office
Version: 2019
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 517
Public exploits: 22
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office version 2019 Microsoft Office 2019 is affected by 517 vulnerabilities: 8 critical, 375 high, 83 medium, 51 low Critical High Medium Low

Vulnerabilities (517)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100321 - Use After Free
CVE-2024-49027		 CWE-416 High
No
No
 - 12.11.2024 SB20241112117
#VU98247 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43609		 CWE-200 Medium
No
No
 - 09.10.2024 SB2024100912
#VU98246 - Untrusted Search Path
CVE-2024-43616		 CWE-426 High
No
No
 - 09.10.2024 SB2024100912
#VU98241 - Use After Free
CVE-2024-43504		 CWE-416 High
Public exploit available
No
 - 09.10.2024 SB2024100908
#VU98211 - Insufficient UI Warning of Dangerous Operations
CVE-2024-43505		 CWE-357 High
No
No
 - 08.10.2024 SB2024100883
#VU97097 - Use After Free
CVE-2024-43465		 CWE-416 High
No
No
 - 10.09.2024 SB20240910135
#VU97062 - Use After Free
CVE-2024-43463		 CWE-416 High
No
No
 - 10.09.2024 SB20240910120
#VU97016 - Protection Mechanism Failure
CVE-2024-38226		 CWE-693 Critical
No
Exploited
 16.0.5465.1001 10.09.2024 SB2024091092
#VU95982 - Heap-based Buffer Overflow
CVE-2024-38169		 CWE-122 High
No
No
 - 14.08.2024 SB2024081418
#VU95971 - External Control of File Name or Path
CVE-2024-38173		 CWE-73 Medium
No
No
 - 14.08.2024 SB2024081409
#VU95964 - Use After Free
CVE-2024-38171		 CWE-416 High
No
No
 - 14.08.2024 SB2024081407
#VU95841 - Improper input validation
CVE-2024-38189		 CWE-20 Critical
No
Exploited
 - 13.08.2024 SB2024081379
#VU95608 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38200		 CWE-200 Medium
Public exploit available
No
 16.0.5461.1000 08.08.2024 SB2024080870
#VU94007 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38020		 CWE-200 Medium
No
No
 - 09.07.2024 SB20240709121
#VU94003 - Improper input validation
CVE-2024-38021		 CWE-20 High
No
No
 - 09.07.2024 SB20240709117
#VU91758 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-30104		 CWE-59 High
No
No
 - 11.06.2024 SB20240611273
#VU91757 - Use After Free
CVE-2024-30101		 CWE-416 Medium
No
No
 - 11.06.2024 SB20240611273
#VU91752 - Incomplete List of Disallowed Inputs
CVE-2024-30103		 CWE-184 Medium
No
No
 - 11.06.2024 SB20240611268
#VU89487 - Deserialization of Untrusted Data
CVE-2024-30042		 CWE-502 High
No
No
 - 14.05.2024 SB2024051467
#VU86485 - Improper input validation
CVE-2024-20673		 CWE-20 High
No
No
 - 13.02.2024 SB2024021382


Showing elements 201 - 220 out of 517