Product · Microsoft

Microsoft Office

170 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

170 results · Feed

High 8.8

CVE-2019-1297 Exploited EPSS 22%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel

Sep 11, 2019
KEV Mar 3, 2022
Unscored —

CVE-2019-1264

A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Se…

Microsoft Microsoft Office Office 365 ProPlus Microsoft Project

Sep 11, 2019
Unscored —

CVE-2019-1246 EPSS 13%

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Sep 11, 2019
Unscored —

CVE-2019-1263

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…

Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel

Sep 11, 2019
Unscored —

CVE-2019-1112

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…

Microsoft Microsoft Office Office 365 ProPlus

Jul 29, 2019
Unscored —

CVE-2019-1111 EPSS 13%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel

Jul 29, 2019
Unscored —

CVE-2019-1110 EPSS 13%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel

Jul 29, 2019
Unscored —

CVE-2019-1109

A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a r…

Microsoft Microsoft Office Office 365 ProPlus

Jul 29, 2019
Unscored —

CVE-2019-1084

An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-…

Microsoft Microsoft Office Office 365 ProPlus Microsoft Exchange Server Android iOS

Jul 15, 2019
Unscored —

CVE-2019-0947 EPSS 14%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office

May 16, 2019
Unscored —

CVE-2019-0945 EPSS 14%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office Office 365 ProPlus

May 16, 2019
Unscored —

CVE-2019-0946 EPSS 14%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office Office 365 ProPlus

May 16, 2019
Unscored —

CVE-2019-0953 EPSS 13%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft Office Online Server Office 365 ProPlus

May 16, 2019
Unscored —

CVE-2019-0827 EPSS 11%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office Office 365 ProPlus

Apr 9, 2019
Unscored —

CVE-2019-0828 EPSS 14%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel

Apr 9, 2019
Unscored —

CVE-2019-0826 EPSS 11%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office Office 365 ProPlus

Apr 9, 2019
Unscored —

CVE-2019-0824 EPSS 11%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office Office 365 ProPlus

Apr 9, 2019
Unscored —

CVE-2019-0823 EPSS 11%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office

Apr 9, 2019
Unscored —

CVE-2019-0825 EPSS 11%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office Office 365 ProPlus

Apr 9, 2019
Unscored —

CVE-2019-0822 EPSS 14%

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, ak…

Microsoft Microsoft Office Office 365 ProPlus

Apr 9, 2019
Unscored —

CVE-2019-0801 EPSS 19%

A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit th…

Microsoft Microsoft Office Office 365 ProPlus

Apr 9, 2019
Unscored —

CVE-2019-0748 EPSS 14%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office

Apr 8, 2019
Unscored —

CVE-2019-0669

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…

Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel

Mar 6, 2019
Unscored —

CVE-2019-0672 EPSS 15%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office Office 365 ProPlus

Mar 6, 2019
Unscored —

CVE-2019-0675 EPSS 15%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office

Mar 6, 2019
Unscored —

CVE-2019-0671 EPSS 15%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office Office 365 ProPlus

Mar 6, 2019
Unscored —

CVE-2019-0674 EPSS 18%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office Office 365 ProPlus

Mar 6, 2019
Unscored —

CVE-2019-0673 EPSS 15%

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles ob…

Microsoft Microsoft Office Office 365 ProPlus

Mar 6, 2019
Unscored —

CVE-2019-0540 EPSS 11%

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a vi…

Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel Viewer

Mar 6, 2019
Unscored —

CVE-2019-0559

An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka…

Microsoft Microsoft Office Office Microsoft Outlook

Jan 8, 2019
Unscored —

CVE-2019-0561

An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Wo…

Microsoft Microsoft Office Office Microsoft Word

Jan 8, 2019
Unscored —

CVE-2019-0560

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, a…

Microsoft Microsoft Office Office

Jan 8, 2019
High 8.8

CVE-2019-0541 Exploited Public exploit EPSS 53%

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML …

Microsoft Microsoft Office Internet Explorer 11 Internet Explorer 10

Jan 8, 2019
KEV Nov 3, 2021
Unscored —

CVE-2019-0585 EPSS 22%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…

Microsoft Microsoft Office Microsoft SharePoint Server Microsoft Office Online Server

Jan 8, 2019
Unscored —

CVE-2018-8636 EPSS 16%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

Microsoft Microsoft Office Office Microsoft Excel

Dec 12, 2018
Unscored —

CVE-2018-8598

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…

Microsoft Microsoft Office Office Microsoft Excel

Dec 12, 2018
Unscored —

CVE-2018-8587 Public exploit EPSS 29%

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …

Microsoft Microsoft Office Office Microsoft Outlook

Dec 12, 2018
Unscored —

CVE-2018-8597 EPSS 16%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…

Microsoft Microsoft Office Office Microsoft Excel

Dec 12, 2018
Unscored —

CVE-2018-8627

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninit…

Microsoft Microsoft Office Office Microsoft Excel

Dec 12, 2018
Unscored —

CVE-2018-8628 EPSS 16%

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handl…

Microsoft Office Online Server Microsoft Office Microsoft SharePoint Server

Dec 12, 2018