Known vulnerabilities in Microsoft Office Web Apps

Vendor: Microsoft
Software: Microsoft Office Web Apps
Software CPE: cpe:2.3:a:microsoft:microsoft_office_web_apps:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 55
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Office Web Apps Microsoft Office Web Apps is affected by 55 known vulnerabilities: 2 critical, 40 high, 6 medium, 7 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU52143 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-28453		 CWE-94 High
No
No
 - 13.04.2021 SB2021041329
#VU51333 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-27057		 CWE-94 High
No
No
 - 09.03.2021 SB2021030942
#VU49431 - Improper input validation
CVE-2021-1716		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU49430 - Improper input validation
CVE-2021-1715		 CWE-20 High
No
No
 - 12.01.2021 SB2021011228
#VU48847 - Memory corruption
CVE-2020-17129		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48846 - Memory corruption
CVE-2020-17128		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48844 - Out-of-bounds read
CVE-2020-17126		 CWE-125 Low
No
No
 - 08.12.2020 SB2020120818
#VU48843 - Memory corruption
CVE-2020-17122		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48842 - Memory corruption
CVE-2020-17123		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48840 - Use After Free
CVE-2020-17125		 CWE-416 High
No
No
 - 08.12.2020 SB2020120817
#VU48315 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17065		 CWE-94 High
No
No
 - 10.11.2020 SB2020111054
#VU48314 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17064		 CWE-94 High
No
No
 - 10.11.2020 SB2020111054
#VU47586 - Memory corruption
CVE-2020-16932		 CWE-119 High
No
No
 - 13.10.2020 SB2020101337
#VU47585 - Memory corruption
CVE-2020-16931		 CWE-119 High
No
No
 - 13.10.2020 SB2020101337
#VU47583 - Memory corruption
CVE-2020-16929		 CWE-119 High
No
No
 - 13.10.2020 SB2020101337
#VU46472 - Memory corruption
CVE-2020-1218		 CWE-119 High
No
No
 - 08.09.2020 SB2020090841
#VU46425 - Memory corruption
CVE-2020-1335		 CWE-119 High
No
No
 - 08.09.2020 SB2020090819
#VU46424 - Out-of-bounds read
CVE-2020-1224		 CWE-125 Medium
No
No
 - 08.09.2020 SB2020090819
#VU45533 - Out-of-bounds read
CVE-2020-1583		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117
#VU45532 - Out-of-bounds read
CVE-2020-1503		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117


Showing elements 1 - 20 out of 55