Known vulnerabilities in Microsoft Office - page 25

Vendor: Microsoft
Software: Microsoft Office
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 973
Public exploits: 65
Known exploited (KEV): 52
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Office Microsoft Office is affected by 973 known vulnerabilities: 53 critical, 676 high, 146 medium, 98 low Critical High Medium Low

Vulnerabilities (973)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60408 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23252		 CWE-200 Low
No
No
 - 08.02.2022 SB2022020836
#VU60394 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22004		 CWE-94 High
No
No
 - 08.02.2022 SB2022020832
#VU60393 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22003		 CWE-94 High
No
No
 - 08.02.2022 SB2022020831
#VU59477 - Memory corruption
CVE-2022-21841		 CWE-119 High
No
No
 - 11.01.2022 SB2022011160
#VU59476 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21840		 CWE-94 High
No
No
 - 11.01.2022 SB2022011159
#VU58954 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43905		 CWE-94 High
No
No
 - 14.12.2021 SB2021121474
#VU58949 - Exposure of sensitive information to an unauthorized actor
CVE-2021-42295		 CWE-200 Low
No
No
 - 14.12.2021 SB2021121470
#VU58948 - Permissions, Privileges, and Access Controls
CVE-2021-42293		 CWE-264 Medium
No
No
 - 14.12.2021 SB2021121469
#VU58926 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-43255		 CWE-451 Low
No
No
 - 14.12.2021 SB2021121454
#VU58924 - Integer overflow
CVE-2021-43875		 CWE-190 High
No
No
 - 14.12.2021 SB2021121452
#VU58907 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-43256		 CWE-94 High
No
No
 - 14.12.2021 SB2021121447
#VU58070 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40442		 CWE-94 High
No
No
 - 09.11.2021 SB2021110941
#VU58064 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-41368		 CWE-94 High
No
No
 - 09.11.2021 SB2021110936
#VU58058 - Improper input validation
CVE-2021-42292		 CWE-20 Critical
No
Exploited
 - 09.11.2021 SB2021110931
#VU57300 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40454		 CWE-200 Low
No
No
 - 12.10.2021 SB2021101241
SB2022111615
#VU57270 - Improper Validation of Array Index
CVE-2021-40480		 CWE-129 High
No
No
 - 12.10.2021 SB2021101219
#VU57269 - Use After Free
CVE-2021-40481		 CWE-416 High
No
No
 - 12.10.2021 SB2021101219
#VU57267 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40472		 CWE-200 Low
No
No
 - 12.10.2021 SB2021101217
#VU57266 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40471		 CWE-94 High
No
No
 - 12.10.2021 SB2021101217
#VU57262 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-40485		 CWE-94 High
No
No
 - 12.10.2021 SB2021101217


Showing elements 481 - 500 out of 973