Msrc Microsoft Office Online Server vulnerabilities

86 known vulnerabilities affecting msrc/microsoft_office_online_server.

Total CVEs
86
CISA KEV
0
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL5HIGH66MEDIUM15

Vulnerabilities

Page 5 of 5
CVE-2019-1035HIGHCVSS 7.82019-06-11
CVE-2019-1035 [HIGH] Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with
msrc
CVE-2019-1034HIGHCVSS 7.82019-06-11
CVE-2019-1034 [HIGH] Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with
msrc
CVE-2019-0953CRITICALCVSS 7.82019-05-14
CVE-2019-0953 [HIGH] Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with
msrc
CVE-2019-0585HIGHCVSS 8.82019-01-08
CVE-2019-0585 [HIGH] Microsoft Word Remote Code Execution Vulnerability Microsoft Word Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with
msrc
CVE-2018-8627HIGHCVSS 5.5Exploited2018-12-11
CVE-2018-8627 [MEDIUM] Microsoft Excel Information Disclosure Vulnerability Microsoft Excel Information Disclosure Vulnerability Description: An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory. An attacker who successfully exploited the vulnerability could view out of bound memory. Exploitation of the vulnerability requires that a user open a specially crafted file w
msrc
CVE-2018-8628HIGHCVSS 7.82018-12-11
CVE-2018-8628 [HIGH] Microsoft PowerPoint Remote Code Execution Vulnerability Microsoft PowerPoint Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take cont
msrc