cbcvebase.

Microsoft Office vulnerabilities

85 known vulnerabilities affecting microsoft/microsoft_office.

Total CVEs
85
CISA KEV
2
actively exploited
Public exploits
1
Exploited in wild
4
Severity breakdown
CRITICAL3HIGH54MEDIUM28

Vulnerabilities

Page 5 of 5
CVE-2019-1263P4MEDIUMCVSS 5.5v2016 for Macv2019 for 32-bit editions+2 more2019-09-11
CVE-2019-1263 [MEDIUM] CWE-200 CVE-2019-1263: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the content An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
nvd
CVE-2019-1402P4MEDIUMCVSS 5.5v2010 Service Pack 2 (32-bit editions)v2010 Service Pack 2 (64-bit editions)+7 more2019-11-12
CVE-2019-1402 [MEDIUM] CWE-200 CVE-2019-1402: An information disclosure vulnerability exists in Microsoft Office software when the software fails An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Information Disclosure Vulnerability'.
nvd
CVE-2018-8427P4MEDIUMCVSS 5.5v2016 for Macv2019 for 32-bit editions+2 more2018-10-10
CVE-2018-8427 [MEDIUM] CWE-200 CVE-2018-8427: An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.
nvd
CVE-2019-1400P4MEDIUMCVSS 5.5v2019 for 32-bit editionsv2019 for 64-bit editions+7 more2019-12-10
CVE-2019-1400 [MEDIUM] CWE-200 CVE-2019-1400: An information disclosure vulnerability exists in Microsoft Access software when the software fails An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.
nvd
CVE-2020-1229P4MEDIUMCVSS 4.3v2019 for 32-bit editionsv2019 for 64-bit editions+9 more2020-06-09
CVE-2020-1229 [MEDIUM] CVE-2020-1229: A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce sec A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.
nvd
Microsoft Office vulnerabilities | cvebase