Office at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Latest advisories
-
Critical max 9.9
Microsoft Office: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Microsoft Office Online Server, Microsoft 365 Apps, Microsoft Office, Microsoft Office LTSC 2021, Microsoft SharePoint, Microsoft Teams, Microsoft Office LTSC 2024 und Microsoft Office 365 ausnutzen, um erweiterte …
-
Critical max 9.8
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Office Produkten ausnutzen, um seine Privilegien zu erhöhen, um Code auszuführen, um Informationen offenzulegen oder zu manipulieren und um Sicherheitsmechanismen zu umgehen.
first Oct 13, 2026 -
High max 9.3
Microsoft Office Produkte: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Microsoft Office Produkte ausnutzen, um Dateien zu manipulieren, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode a…
first Aug 11, 2026 -
High max 9.8WID-SEC-2026-3234 135 CVEs
Microsoft Office Produkte: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Office Produkten, Microsoft Office Online Server, Microsoft 365 Apps, Microsoft SharePoint, Microsoft Teams und Microsoft Skype ausnutzen, um erhöhte Berechtigungen zu erlangen, um Code ausz…
-
Critical max 9.8
Microsoft Office Produkte: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Office Produkten ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um falsche Informationen darzustellen, um seine Privilegien zu erhöhen, und um Sicherheitsv…
first Jul 14, 2026
41 results · Feed
-
Unscored —
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Wo…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, a…
-
High 8.8
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML …
KEV Nov 3, 2021 -
Unscored —CVE-2019-0585 EPSS 22%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…
-
Unscored —CVE-2018-8636 EPSS 16%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…
-
Unscored —
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …
-
Unscored —CVE-2018-8597 EPSS 16%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninit…
-
Unscored —CVE-2018-8628 EPSS 16%
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handl…
-
Unscored —CVE-2018-8524 EPSS 19%
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …
-
Unscored —
A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vul…
-
Unscored —CVE-2018-8582 EPSS 19%
A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export fi…
-
Unscored —CVE-2018-8577 EPSS 19%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —CVE-2018-8522 EPSS 19%
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …
-
Unscored —
An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings con…
-
Unscored —CVE-2018-8574 EPSS 19%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —CVE-2018-8573 EPSS 19%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in mem…
-
Unscored —CVE-2018-8576 EPSS 19%
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in …
-
Unscored —CVE-2018-8575 EPSS 20%
A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in …
-
Unscored —
An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Informa…
-
Unscored —CVE-2018-8432 EPSS 20%
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, ak…
-
Unscored —
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, …
-
Unscored —CVE-2018-8501 EPSS 20%
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handl…
-
Unscored —CVE-2018-8502 EPSS 20%
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obj…
-
Unscored —CVE-2018-8504 EPSS 20%
A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle obje…
-
Unscored —
Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft …
-
Unscored —CVE-2017-0197 EPSS 19%
Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafte…
-
Unscored —
Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remo…
-
Unscored —CVE-2017-0194 EPSS 26%
Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain …
-
Unscored —CVE-2017-0029 EPSS 16%
Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of s…
-
Unscored —CVE-2017-0027 EPSS 23%
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Servi…
-
Unscored —CVE-2017-0030 EPSS 28%
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2…
-
Unscored —CVE-2017-0020 EPSS 17%
Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to …
-
Unscored —CVE-2017-0105 EPSS 31%
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automat…
-
Unscored —CVE-2017-0006 EPSS 18%
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3…
-
Unscored —CVE-2017-0053 EPSS 18%
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1…
-
Unscored —CVE-2017-0019 EPSS 18%
Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) …
-
Unscored —CVE-2017-0031 EPSS 28%
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to ex…