Known vulnerabilities in Microsoft Office Web Apps 2013 Service Pack 1

Vendor: Microsoft
Software: Microsoft Office Web Apps
Version: 2013 Service Pack 1
Software CPE: cpe:2.3:a:microsoft:microsoft_office_web_apps:*:*:*:*:*:microsoft_office:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 34
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Office Web Apps version 2013 Service Pack 1 Microsoft Office Web Apps 2013 Service Pack 1 is affected by 34 vulnerabilities: 2 critical, 23 high, 3 medium, 6 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51333 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-27057		 CWE-94 High
No
No
 - 09.03.2021 SB2021030942
#VU48847 - Memory corruption
CVE-2020-17129		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48846 - Memory corruption
CVE-2020-17128		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48844 - Out-of-bounds read
CVE-2020-17126		 CWE-125 Low
No
No
 - 08.12.2020 SB2020120818
#VU48842 - Memory corruption
CVE-2020-17123		 CWE-119 High
No
No
 - 08.12.2020 SB2020120818
#VU48840 - Use After Free
CVE-2020-17125		 CWE-416 High
No
No
 - 08.12.2020 SB2020120817
#VU48315 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17065		 CWE-94 High
No
No
 - 10.11.2020 SB2020111054
#VU48314 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17064		 CWE-94 High
No
No
 - 10.11.2020 SB2020111054
#VU47586 - Memory corruption
CVE-2020-16932		 CWE-119 High
No
No
 - 13.10.2020 SB2020101337
#VU47585 - Memory corruption
CVE-2020-16931		 CWE-119 High
No
No
 - 13.10.2020 SB2020101337
#VU47583 - Memory corruption
CVE-2020-16929		 CWE-119 High
No
No
 - 13.10.2020 SB2020101337
#VU46472 - Memory corruption
CVE-2020-1218		 CWE-119 High
No
No
 - 08.09.2020 SB2020090841
#VU46425 - Memory corruption
CVE-2020-1335		 CWE-119 High
No
No
 - 08.09.2020 SB2020090819
#VU46424 - Out-of-bounds read
CVE-2020-1224		 CWE-125 Medium
No
No
 - 08.09.2020 SB2020090819
#VU45533 - Out-of-bounds read
CVE-2020-1583		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117
#VU45532 - Out-of-bounds read
CVE-2020-1503		 CWE-125 Low
No
No
 - 11.08.2020 SB2020081117
#VU29785 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1442		 CWE-79 Low
No
No
 - 14.07.2020 SB2020071435
#VU29772 - Memory corruption
CVE-2020-1446		 CWE-119 High
No
No
 - 14.07.2020 SB2020071424
#VU29771 - Memory corruption
CVE-2020-1447		 CWE-119 High
No
No
 - 14.07.2020 SB2020071424
#VU29766 - Memory corruption
CVE-2020-1448		 CWE-119 High
No
No
 - 14.07.2020 SB2020071424


Showing elements 1 - 20 out of 34