Known vulnerabilities in Microsoft Project

Vendor: Microsoft
Software: Microsoft Project
Software CPE: cpe:2.3:a:microsoft:microsoft_project:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 19
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Project Microsoft Project is affected by 19 known vulnerabilities: 6 critical, 12 high, 1 medium Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95841 - Improper input validation
CVE-2024-38189		 CWE-20 Critical
No
Exploited
 - 13.08.2024 SB2024081379
#VU29784 - Improper input validation
CVE-2020-1449		 CWE-20 High
No
No
 - 14.07.2020 SB2020071434
#VU28840 - Out-of-bounds read
CVE-2020-1322		 CWE-125 Medium
No
No
 - 09.06.2020 SB2020060922
#VU26852 - Improper input validation
CVE-2020-0760		 CWE-20 High
No
No
 - 14.04.2020 SB2020041418
#VU15857 - Memory corruption
CVE-2018-8575		 CWE-119 High
No
No
 - 13.11.2018 SB2018111324
#VU6456 - Memory corruption
CVE-2017-0281		 CWE-119 High
No
No
 - 09.05.2017 SB2017050906
#VU1388 - Integer overflow
CVE-2009-3126		 CWE-190 Critical
No
No
 - 19.12.2016 SB2009101301
#VU1387 - Memory corruption
CVE-2009-2504		 CWE-119 High
No
No
 - 19.12.2016 SB2009101301
#VU1386 - Memory corruption
CVE-2009-2503		 CWE-119 High
No
No
 - 19.12.2016 SB2009101301
#VU1385 - Memory corruption
CVE-2009-2502		 CWE-119 High
No
No
 - 19.12.2016 SB2009101301
#VU1384 - Heap-based Buffer Overflow
CVE-2009-2501		 CWE-122 Critical
No
No
 - 19.12.2016 SB2009101301
#VU1383 - Integer overflow
CVE-2009-2500		 CWE-190 High
No
No
 - 19.12.2016 SB2009101301
#VU1271 - Memory corruption
CVE-2008-4255		 CWE-119 High
Available
No
 - 13.12.2016 SB2008120903
#VU1229 - Memory corruption
CVE-2006-2389		 CWE-119 High
Available
No
 - 07.12.2016 SB2006071102
#VU1228 - Memory corruption
CVE-2006-1318		 CWE-119 High
No
No
 - 07.12.2016 SB2006071102
#VU1227 - Memory corruption
CVE-2006-1540		 CWE-119 Critical
Available
No
 - 07.12.2016 SB2006071102
#VU1226 - Memory corruption
CVE-2006-1316		 CWE-119 High
No
No
 - 07.12.2016 SB2006071102
#VU1221 - Memory corruption
CVE-2007-0671		 CWE-119 Critical
No
Exploited
 - 06.12.2016 SB2007020204
#VU1179 - Memory corruption
CVE-2006-3649		 CWE-119 Critical
No
No
 - 15.11.2016 SB2006080801