365 Apps

420 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-41063 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Excel Office +3

NVD VulDB

CVSS 3.1

7.8

EPSS

2.3%

CVE-2022-41061 HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE Code Injection 365 Apps Office +6

NVD VulDB

CVSS 3.1

7.8

EPSS

1.2%

CVE-2022-41060 MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Information Disclosure 365 Apps Office Office Long Term Servicing Channel +5

NVD VulDB

CVSS 3.1

5.5

EPSS

1.7%

CVE-2022-41031 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-38049 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-38048 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.5%

CVE-2022-38001 MEDIUM PATCH This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Information Disclosure 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

6.5

EPSS

1.4%

CVE-2022-38010 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel +1

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-37963 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.0%

CVE-2022-37962 HIGH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.2%

CVE-2022-34717 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2022-33631 HIGH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Authentication Bypass 365 Apps Excel Office +1

NVD

CVSS 3.1

7.3

EPSS

0.8%

CVE-2022-33632 MEDIUM This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.7), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

4.7

EPSS

1.1%

CVE-2022-30174 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2022-29109 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

7.8

EPSS

2.4%

CVE-2022-29107 MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Authentication Bypass 365 Apps Office Office Long Term Servicing Channel +2

NVD VulDB

CVSS 3.1

5.5

EPSS

7.7%

CVE-2022-26934 MEDIUM PATCH This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 17.4%.

Microsoft Information Disclosure 365 Apps Office Office Long Term Servicing Channel +17

NVD VulDB

CVSS 3.1

6.5

EPSS

17.4%

CVE-2022-26901 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Excel Excel Rt +4

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-24473 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

2.4%

CVE-2022-24511 MEDIUM This Month

Microsoft Office Word Tampering Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Information Disclosure 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

5.5

EPSS

0.7%

CVE-2022-24510 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-24509 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-24462 MEDIUM This Month

Microsoft Word Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Authentication Bypass 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

0.8%

CVE-2022-24461 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-21841 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-43875 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.1%

CVE-2021-43256 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Excel Rt +4

NVD VulDB

CVSS 3.1

7.8

EPSS

0.9%

CVE-2021-43255 MEDIUM PATCH This Month

Microsoft Office Trust Center Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Information Disclosure 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

1.8%

CVE-2021-42295 MEDIUM PATCH This Month

Visual Basic for Applications Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

7.3%

CVE-2021-42293 MEDIUM PATCH This Month

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

6.5

EPSS

3.4%

CVE-2021-42296 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

Microsoft RCE Code Injection 365 Apps Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

0.7%

CVE-2021-42292 HIGH KEV PATCH THREAT This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft Authentication Bypass 365 Apps Excel Office +1

NVD

CVSS 3.1

7.8

EPSS

31.9%

CVE-2021-41368 MEDIUM PATCH This Month

Microsoft Access Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

6.1

EPSS

3.5%

CVE-2021-40442 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office +4

NVD

CVSS 3.1

7.8

EPSS

2.1%

CVE-2021-40485 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Code Injection Microsoft 365 Apps Excel +4

NVD

CVSS 3.1

7.8

EPSS

2.5%

CVE-2021-40481 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.1

EPSS

5.6%

CVE-2021-40480 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

5.4%

CVE-2021-40479 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

2.2%

CVE-2021-40474 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office +3

NVD

CVSS 3.1

7.8

EPSS

2.2%

CVE-2021-40473 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

2.2%

CVE-2021-40472 MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure 365 Apps Excel Office +3

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2021-40471 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

2.2%

CVE-2021-40454 MEDIUM PATCH This Month

Rich Text Edit Control Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure 365 Apps Office Windows 10 Windows 11 +7

NVD

CVSS 3.1

5.5

EPSS

0.5%

CVE-2021-38659 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps

NVD

CVSS 3.1

7.8

EPSS

4.9%

CVE-2021-38657 MEDIUM PATCH This Month

Microsoft Office Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity.

Microsoft Information Disclosure 365 Apps

NVD

CVSS 3.1

6.1

EPSS

0.8%

CVE-2021-38656 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Use After Free Microsoft Memory Corruption RCE 365 Apps

NVD

CVSS 3.1

7.8

EPSS

4.9%

CVE-2021-38655 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Use After Free Microsoft Memory Corruption RCE 365 Apps +4

NVD

CVSS 3.1

7.8

EPSS

4.9%

CVE-2021-38654 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office

NVD

CVSS 3.1

7.8

EPSS

4.9%

CVE-2021-38653 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Microsoft Memory Corruption RCE 365 Apps +1

NVD

CVSS 3.1

7.8

EPSS

4.9%

CVE-2021-38650 HIGH PATCH This Week

Microsoft Office Spoofing Vulnerability. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure 365 Apps Office

NVD

CVSS 3.1

7.6

EPSS

1.5%

CVE-2021-38646 HIGH KEV PATCH THREAT This Week

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office

NVD

CVSS 3.1

7.8

EPSS

4.4%

CVE-2021-36941 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office

NVD

CVSS 3.1

7.8

EPSS

2.0%

CVE-2021-34478 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office

NVD

CVSS 3.1

7.8

EPSS

54.4%

CVE-2021-34452 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Word

NVD

CVSS 3.1

7.8

EPSS

2.0%

CVE-2021-34501 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office +1

NVD

CVSS 3.1

7.8

EPSS

53.2%

CVE-2021-34469 HIGH PATCH This Week

Microsoft Office Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Authentication Bypass 365 Apps Office

NVD

CVSS 3.1

8.2

EPSS

3.3%

CVE-2021-31949 HIGH PATCH This Week

Microsoft Outlook Remote Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Code Injection Microsoft 365 Apps Office +1

NVD

CVSS 3.1

7.3

EPSS

2.6%

CVE-2021-31941 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Outlook

NVD

CVSS 3.1

7.8

EPSS

2.9%

CVE-2021-31940 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office

NVD

CVSS 3.1

7.8

EPSS

2.3%

CVE-2021-31939 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office +2

NVD

CVSS 3.1

7.8

EPSS

13.3%

CVE-2021-31180 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Word

NVD

CVSS 3.1

7.8

EPSS

2.3%

CVE-2021-31179 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office +2

NVD

CVSS 3.1

7.8

EPSS

13.5%

CVE-2021-31178 MEDIUM PATCH This Month

Microsoft Office Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Integer Overflow Information Disclosure Microsoft 365 Apps Excel +4

NVD

CVSS 3.1

5.5

EPSS

16.0%

CVE-2021-31177 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Use After Free Microsoft Memory Corruption RCE 365 Apps +5

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-31176 HIGH PATCH This Week

Use After Free Microsoft Memory Corruption RCE 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

3.0%

CVE-2021-31175 HIGH PATCH This Week

Use After Free Microsoft Memory Corruption RCE 365 Apps +4

NVD

CVSS 3.1

7.8

EPSS

3.2%

CVE-2021-31174 MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Microsoft Information Disclosure 365 Apps Excel +3

NVD

CVSS 3.1

5.5

EPSS

2.9%

CVE-2021-28455 HIGH PATCH This Week

Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Microsoft RCE 365 Apps Office Windows 10 +7

NVD

CVSS 3.1

8.8

EPSS

2.1%

CVE-2021-28456 MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Information Disclosure 365 Apps Excel Office +2

NVD

CVSS 3.1

5.5

EPSS

3.7%

CVE-2021-28454 HIGH PATCH This Week

Use After Free Microsoft Memory Corruption RCE 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-28453 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Office Online Server +4

NVD

CVSS 3.1

7.8

EPSS

4.1%

CVE-2021-28452 HIGH PATCH This Week

Microsoft Outlook Memory Corruption Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Microsoft Memory Corruption 365 Apps Office +1

NVD

CVSS 3.1

7.1

EPSS

1.3%

CVE-2021-28451 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office +2

NVD

CVSS 3.1

7.8

EPSS

2.4%

CVE-2021-28449 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office

NVD

CVSS 3.1

7.8

EPSS

2.5%

CVE-2021-27058 HIGH PATCH This Week

Microsoft Office ClickToRun Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps

NVD

CVSS 3.1

7.8

EPSS

3.5%

CVE-2021-27057 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office +2

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-27056 HIGH PATCH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office Powerpoint

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-27055 HIGH PATCH This Week

Microsoft Visio Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.

Microsoft Authentication Bypass 365 Apps Office Visio

NVD

CVSS 3.1

7.0

EPSS

2.2%

CVE-2021-27054 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office +2

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-27053 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office +2

NVD

CVSS 3.1

7.8

EPSS

3.6%

CVE-2021-24108 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Office

NVD

CVSS 3.1

7.8

EPSS

2.3%

CVE-2021-24070 HIGH PATCH This Week

Use After Free Microsoft Memory Corruption RCE 365 Apps +4

NVD

CVSS 3.1

7.8

EPSS

2.3%

CVE-2021-24069 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps Excel Office +2

NVD

CVSS 3.1

7.8

EPSS

2.3%

CVE-2021-24067 HIGH PATCH This Week

Use After Free Microsoft Memory Corruption RCE 365 Apps +4

NVD

CVSS 3.1

7.8

EPSS

2.3%

CVE-2021-1716 HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office Office Online Server +5

NVD

CVSS 3.1

7.8

EPSS

3.6%

CVE-2021-1715 HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Memory Corruption RCE 365 Apps +7

NVD

CVSS 3.1

7.8

EPSS

3.6%

CVE-2021-1714 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE Excel Services 365 Apps Excel +4

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-1713 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft RCE 365 Apps Excel +3

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-1711 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps Office

NVD

CVSS 3.1

7.8

EPSS

3.6%

CVE-2020-17130 MEDIUM PATCH This Month

Microsoft Excel Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Authentication Bypass 365 Apps Excel

NVD

CVSS 3.1

6.5

EPSS

2.2%

CVE-2022-41063

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +5

NVD VulDB

CVE-2022-41061

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE Code Injection +8

NVD VulDB

CVE-2022-41060

EPSS 2% CVSS 5.5

MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Information Disclosure 365 Apps +7

NVD VulDB

CVE-2022-41031

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2022-38049

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2022-38048

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2022-38001

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Information Disclosure 365 Apps +2

NVD

CVE-2022-38010

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +3

NVD

CVE-2022-37963

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +2

NVD

CVE-2022-37962

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +2

NVD

CVE-2022-34717

EPSS 2% CVSS 8.8

HIGH This Week

Microsoft RCE 365 Apps +2

NVD

CVE-2022-33631

EPSS 1% CVSS 7.3

HIGH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Authentication Bypass 365 Apps +3

NVD

CVE-2022-33632

EPSS 1% CVSS 4.7

MEDIUM This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.7), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +2

NVD

CVE-2022-30174

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +1

NVD

CVE-2022-29109

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +3

NVD VulDB

CVE-2022-29107

EPSS 8% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Authentication Bypass 365 Apps +4

NVD VulDB

CVE-2022-26934

EPSS 17% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Information Disclosure 365 Apps +19

NVD VulDB

CVE-2022-26901

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +6

NVD VulDB

CVE-2022-24473

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +2

NVD VulDB

CVE-2022-24511

EPSS 1% CVSS 5.5

MEDIUM This Month

Microsoft Office Word Tampering Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Information Disclosure 365 Apps +3

NVD VulDB

CVE-2022-24510

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +2

NVD VulDB

CVE-2022-24509

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +2

NVD VulDB

CVE-2022-24462

EPSS 1% CVSS 5.5

MEDIUM This Month

Microsoft Word Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft Authentication Bypass 365 Apps +2

NVD VulDB

CVE-2022-24461

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +2

NVD VulDB

CVE-2022-21841

EPSS 3% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +2

NVD VulDB

CVE-2021-43875

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD VulDB

CVE-2021-43256

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +6

NVD VulDB

CVE-2021-43255

EPSS 2% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Office Trust Center Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Information Disclosure 365 Apps +2

NVD VulDB

CVE-2021-42295

EPSS 7% CVSS 5.5

MEDIUM PATCH This Month

Visual Basic for Applications Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure 365 Apps Office +1

NVD VulDB

CVE-2021-42293

EPSS 3% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Information Disclosure 365 Apps +2

NVD VulDB

CVE-2021-42296

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft RCE Code Injection +2

NVD VulDB

CVE-2021-42292

EPSS 32% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft Authentication Bypass 365 Apps +3

NVD

CVE-2021-41368

EPSS 4% CVSS 6.1

MEDIUM PATCH This Month

Microsoft Access Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-40442

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +6

NVD

CVE-2021-40485

EPSS 3% CVSS 7.8

HIGH PATCH This Week

RCE Code Injection Microsoft +6

NVD

CVE-2021-40481

EPSS 6% CVSS 7.1

HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-40480

EPSS 5% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-40479

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-40474

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +5

NVD

CVE-2021-40473

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-40472

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure 365 Apps +5

NVD

CVE-2021-40471

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-40454

EPSS 0% CVSS 5.5

MEDIUM PATCH This Month

Rich Text Edit Control Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure 365 Apps Office +9

NVD

CVE-2021-38659

EPSS 5% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps

NVD

CVE-2021-38657

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

Microsoft Office Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity.

Microsoft Information Disclosure 365 Apps

NVD

CVE-2021-38656

EPSS 5% CVSS 7.8

HIGH PATCH This Week

Use After Free Microsoft Memory Corruption +2

NVD

CVE-2021-38655

EPSS 5% CVSS 7.8

HIGH PATCH This Week

Use After Free Microsoft Memory Corruption +6

NVD

CVE-2021-38654

EPSS 5% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +1

NVD

CVE-2021-38653

EPSS 5% CVSS 7.8

HIGH PATCH This Week

Buffer Overflow Microsoft Memory Corruption +3

NVD

CVE-2021-38650

EPSS 1% CVSS 7.6

HIGH PATCH This Week

Microsoft Office Spoofing Vulnerability. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure 365 Apps +1

NVD

CVE-2021-38646

EPSS 4% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +1

NVD

CVE-2021-36941

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +1

NVD

CVE-2021-34478

EPSS 54% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +1

NVD

CVE-2021-34452

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-34501

EPSS 53% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +3

NVD

CVE-2021-34469

EPSS 3% CVSS 8.2

HIGH PATCH This Week

Microsoft Office Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Authentication Bypass 365 Apps +1

NVD

CVE-2021-31949

EPSS 3% CVSS 7.3

HIGH PATCH This Week

RCE Code Injection Microsoft +3

NVD

CVE-2021-31941

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-31940

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +1

NVD

CVE-2021-31939

EPSS 13% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +4

NVD

CVE-2021-31180

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-31179

EPSS 13% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +4

NVD

CVE-2021-31178

EPSS 16% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Office Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Integer Overflow Information Disclosure Microsoft +6

NVD

CVE-2021-31177

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Use After Free Microsoft Memory Corruption +7

NVD

CVE-2021-31176

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Use After Free Microsoft Memory Corruption +5

NVD

CVE-2021-31175

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Use After Free Microsoft Memory Corruption +6

NVD

CVE-2021-31174

EPSS 3% CVSS 5.5

MEDIUM PATCH This Month

Buffer Overflow Microsoft Information Disclosure +5

NVD

CVE-2021-28455

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Microsoft RCE 365 Apps +9

NVD

CVE-2021-28456

EPSS 4% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Information Disclosure 365 Apps +4

NVD

CVE-2021-28454

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Use After Free Microsoft Memory Corruption +5

NVD

CVE-2021-28453

EPSS 4% CVSS 7.8

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +6

NVD

CVE-2021-28452

EPSS 1% CVSS 7.1

HIGH PATCH This Week

Buffer Overflow Microsoft Memory Corruption +3

NVD

CVE-2021-28451

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +4

NVD

CVE-2021-28449

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-27058

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Office ClickToRun Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps

NVD

CVE-2021-27057

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +4

NVD

CVE-2021-27056

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +2

NVD

CVE-2021-27055

EPSS 2% CVSS 7.0

HIGH PATCH This Week

Microsoft Visio Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.

Microsoft Authentication Bypass 365 Apps +2

NVD

CVE-2021-27054

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +4

NVD

CVE-2021-27053

EPSS 4% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +4

NVD

CVE-2021-24108

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +1

NVD

CVE-2021-24070

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Use After Free Microsoft Memory Corruption +6

NVD

CVE-2021-24069

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE 365 Apps +4

NVD

CVE-2021-24067

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Use After Free Microsoft Memory Corruption +6

NVD

CVE-2021-1716

EPSS 4% CVSS 7.8

HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +7

NVD

CVE-2021-1715

EPSS 4% CVSS 7.8

HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Memory Corruption +9

NVD

CVE-2021-1714

EPSS 3% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE Excel Services +6

NVD

CVE-2021-1713

EPSS 3% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft RCE +5

NVD

CVE-2021-1711

EPSS 4% CVSS 7.8

HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Microsoft RCE 365 Apps +1

NVD

CVE-2020-17130

EPSS 2% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Excel Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Authentication Bypass 365 Apps +1

NVD

Prev Page 4 of 5 Next