Known vulnerabilities in Microsoft Office - page 44

Vendor: Microsoft
Software: Microsoft Office
Software CPE: cpe:2.3:a:microsoft:microsoft_office:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 973
Public exploits: 65
Known exploited (KEV): 52
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Office Microsoft Office is affected by 973 known vulnerabilities: 53 critical, 676 high, 146 medium, 98 low Critical High Medium Low

Vulnerabilities (973)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU5559 - Heap-based Buffer Overflow
CVE-2015-2424		 CWE-122 Critical
No
Exploited
 - 31.01.2017 SB2015063001
SB2015071405
#VU5555 - Memory corruption
CVE-2015-2377		 CWE-119 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5554 - Memory corruption
CVE-2015-2376		 CWE-119 High
No
No
 - 31.01.2017 SB2015071402
SB2015071405
#VU5466 - Use After Free
CVE-2015-1651		 CWE-416 High
No
No
 - 27.01.2017 SB2015041401
SB2015041402
#VU5465 - Use After Free
CVE-2015-1650		 CWE-416 High
No
No
 - 27.01.2017 SB2015041401
SB2015041402
#VU5464 - Use After Free
CVE-2015-1649		 CWE-416 High
No
No
 - 27.01.2017 SB2015041401
SB2015041402
#VU5463 - Memory corruption
CVE-2015-1641		 CWE-119 Critical
Available
Exploited
 - 27.01.2017 SB2015041401
SB2015041402
#VU5209 - Permissions, Privileges, and Access Controls
CVE-2014-1809		 CWE-264 Critical
No
No
 - 20.01.2017 SB2014051304
#VU5190 - Memory corruption
CVE-2014-1757		 CWE-119 High
No
No
 - 20.01.2017 SB2014032401
#VU5189 - Memory corruption
CVE-2014-1758		 CWE-119 High
No
No
 - 20.01.2017 SB2014032401
#VU5188 - Memory corruption
CVE-2014-1761		 CWE-119 Critical
Available
Exploited
 - 20.01.2017 SB2014032401
#VU4356 - Memory corruption
CVE-2013-3906		 CWE-119 Critical
Available
Exploited
 - 12.01.2017 SB2013110501
#VU4346 - Permissions, Privileges, and Access Controls
CVE-2013-5057		 CWE-264 High
No
No
 - 12.01.2017 SB2013121003
#VU4343 - Exposure of sensitive information to an unauthorized actor
CVE-2013-5054		 CWE-200 High
No
No
 - 12.01.2017 SB2013121001
#VU4342 - Memory corruption
CVE-2013-1331		 CWE-119 Critical
No
Exploited
 - 12.01.2017 SB2013061101
#VU4236 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2520		 CWE-79 Medium
No
No
 - 11.01.2017 SB2012100901
#VU4087 - Untrusted Search Path
CVE-2012-1854		 CWE-426 Critical
No
Exploited
 - 10.01.2017 SB2012071001
#VU3043 - Memory corruption
CVE-2012-1856		 CWE-119 Critical
No
Exploited
 - 29.12.2016 SB2012081402
#VU2995 - Heap-based Buffer Overflow
CVE-2012-0167		 CWE-122 High
No
No
 - 28.12.2016 SB2012050802
#VU2994 - Improper input validation
CVE-2012-0165		 CWE-20 High
No
Exploited
 - 28.12.2016 SB2012050801
SB2012050802


Showing elements 861 - 880 out of 973