Microsoft Office 2019 For Mac vulnerabilities
88 known vulnerabilities affecting microsoft/microsoft_office_2019_for_mac.
Total CVEs
88
CISA KEV
1
actively exploited
Public exploits
9
Exploited in wild
2
Severity breakdown
CRITICAL2HIGH70MEDIUM15LOW1
Vulnerabilities
Page 4 of 5
CVE-2022-41061P3HIGHCVSS 7.8≥ 16.0.0, < 16.67.221113002022-11-09
CVE-2022-41061 [HIGH] CWE-94 CVE-2022-41061: Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
nvd
CVE-2023-35371P3HIGHCVSS 7.8≥ 16.0.0, < 16.76.230811012023-08-08
CVE-2023-35371 [HIGH] CWE-415 CVE-2023-35371: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2023-29344P3HIGHCVSS 7.8≥ 16.0.0, < 16.73.230514012023-06-05
CVE-2023-29344 [HIGH] CWE-122 CVE-2023-29344: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2023-21734P3HIGHCVSS 7.8≥ 16.0.0, < 16.69.230107002023-01-10
CVE-2023-21734 [HIGH] CWE-416 CVE-2023-21734: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2022-41031P3HIGHCVSS 7.8≥ 16.0.0, < 16.66.221009002022-10-11
CVE-2022-41031 [HIGH] CVE-2022-41031: Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
nvd
CVE-2023-21735P3HIGHCVSS 7.8≥ 16.0.0, < 16.69.230107002023-01-10
CVE-2023-21735 [HIGH] CWE-416 CVE-2023-21735: Microsoft Office Remote Code Execution Vulnerability
Microsoft Office Remote Code Execution Vulnerability
nvd
CVE-2023-33149P3HIGHCVSS 7.8≥ 16.0.0, < 16.75.230709012023-07-11
CVE-2023-33149 [HIGH] CWE-416 CVE-2023-33149: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2023-36762P3HIGHCVSS 7.3≥ 16.0.0, < 16.77.230910032023-09-12
CVE-2023-36762 [HIGH] CWE-20 CVE-2023-36762: Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability
nvd
CVE-2022-41107P3HIGHCVSS 7.8≥ 16.0.0, < 16.67.221113002022-11-09
CVE-2022-41107 [HIGH] CVE-2022-41107: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2022-44692P3HIGHCVSS 7.8≥ 16.0.0, < 16.68.221211002022-12-13
CVE-2022-44692 [HIGH] CVE-2022-44692: Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
nvd
CVE-2023-24910P3HIGHCVSS 7.8≥ 16.0.0, < 16.71.230312002023-03-14
CVE-2023-24910 [HIGH] CWE-476 CVE-2023-24910: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-36565P4HIGHCVSS 7.0≥ 16.0.0, < 16.78.231008022023-10-10
CVE-2023-36565 [HIGH] CWE-416 CVE-2023-36565: Microsoft Office Graphics Elevation of Privilege Vulnerability
Microsoft Office Graphics Elevation of Privilege Vulnerability
nvd
CVE-2022-26934P4MEDIUMCVSS 6.5≥ 16.0.0, < 16.63.220708012022-05-10
CVE-2022-26934 [MEDIUM] CVE-2022-26934: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2020-16855P4MEDIUMCVSS 5.5≥ 16.0.0, < publication2020-09-11
CVE-2020-16855 [MEDIUM] CWE-125 CVE-2020-16855: <p>An information disclosure vulnerability exists when Microsoft Office software reads out of bound
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory. An attacker who successfully exploited the vulnerability could view out of bound memory.
Exploitation of the vulnerability requires that a user open a specially crafted
nvd
CVE-2020-1583P4MEDIUMCVSS 5.5≥ 16.0.0, < publication2020-08-17
CVE-2020-1583 [MEDIUM] CVE-2020-1583: An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.
To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker mus
nvd
CVE-2020-1503P4MEDIUMCVSS 5.5≥ 16.0.0, < publication2020-08-17
CVE-2020-1503 [MEDIUM] CVE-2020-1503: An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.
To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker mus
nvd
CVE-2020-1224P4MEDIUMCVSS 5.5≥ 16.0.0, < publication2020-09-11
CVE-2020-1224 [MEDIUM] CVE-2020-1224: <p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the cont
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.
To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker mu
nvd
CVE-2022-22716P4MEDIUMCVSS 5.5≥ 16.0.0, < 16.58.220215012022-02-09
CVE-2022-22716 [MEDIUM] CWE-119 CVE-2022-22716: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2021-28456P4MEDIUMCVSS 5.5≥ 16.0.0, < publication2021-04-13
CVE-2021-28456 [MEDIUM] CVE-2021-28456: Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
nvd
CVE-2023-36767P4MEDIUMCVSS 4.3≥ 16.0.0, < 16.77.230910032023-09-12
CVE-2023-36767 [MEDIUM] CWE-20 CVE-2023-36767: Microsoft Office Security Feature Bypass Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
nvd