365 Apps

614 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-47213 Dec 13, 19:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2022-47212 Dec 13, 19:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2022-47211 Dec 13, 19:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-44696 Dec 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

2.3%

CVE-2022-44695 Dec 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

7.8

EPSS

2.3%

CVE-2022-44694 Dec 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.6%

CVE-2022-44692 Dec 13, 19:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-44691 Dec 13, 19:15 HIGH This Week

Microsoft Office OneNote Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.9%

CVE-2022-26806 Dec 13, 19:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-26805 Dec 13, 19:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-26804 Dec 13, 19:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-41107 Nov 09, 22:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

2.2%

CVE-2022-41106 Nov 09, 22:15 HIGH Act Now

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 17.6% and no vendor patch available.

RCE Microsoft 365 Apps Excel Office +3

NVD VulDB

CVSS 3.1

8.8

EPSS

17.6%

CVE-2022-41105 Nov 09, 22:15 MEDIUM This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

1.7%

CVE-2022-41104 Nov 09, 22:15 MEDIUM This Month

Microsoft Excel Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Excel Office +1

NVD VulDB

CVSS 3.1

5.5

EPSS

2.5%

CVE-2022-41103 Nov 09, 22:15 MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +5

NVD VulDB

CVSS 3.1

5.5

EPSS

1.6%

CVE-2022-41063 Nov 09, 22:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Excel Office +3

NVD VulDB

CVSS 3.1

7.8

EPSS

2.3%

CVE-2022-41061 Nov 09, 22:15 HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection 365 Apps Office +6

NVD VulDB

CVSS 3.1

7.8

EPSS

1.2%

CVE-2022-41060 Nov 09, 22:15 MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +5

NVD VulDB

CVSS 3.1

5.5

EPSS

1.7%

CVE-2022-41031 Oct 11, 19:15 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-38049 Oct 11, 19:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-38048 Oct 11, 19:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.5%

CVE-2022-38001 Oct 11, 19:15 MEDIUM PATCH This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

6.5

EPSS

1.4%

CVE-2022-38010 Sep 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-37963 Sep 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.0%

CVE-2022-37962 Sep 13, 19:15 HIGH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.2%

CVE-2022-34717 Aug 09, 20:15 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2022-33631 Aug 09, 20:15 HIGH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Excel Office +1

NVD

CVSS 3.1

7.3

EPSS

0.8%

CVE-2022-33632 Jul 12, 23:15 MEDIUM This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.7), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

4.7

EPSS

1.1%

CVE-2022-30174 Jun 15, 22:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2022-29109 May 10, 21:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

7.8

EPSS

2.4%

CVE-2022-29107 May 10, 21:15 MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel +2

NVD VulDB

CVSS 3.1

5.5

EPSS

7.7%

CVE-2022-26934 May 10, 21:15 MEDIUM PATCH This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 17.4%.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +17

NVD VulDB

CVSS 3.1

6.5

EPSS

17.4%

CVE-2022-26901 Apr 15, 19:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Excel Office +4

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-24473 Apr 15, 19:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

2.4%

CVE-2022-24511 Mar 09, 17:15 MEDIUM This Month

Microsoft Office Word Tampering Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

5.5

EPSS

0.7%

CVE-2022-24510 Mar 09, 17:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-24509 Mar 09, 17:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-24462 Mar 09, 17:15 MEDIUM This Month

Microsoft Word Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

0.8%

CVE-2022-24461 Mar 09, 17:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-21841 Jan 11, 21:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-43875 Dec 15, 15:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.1%

CVE-2021-43256 Dec 15, 15:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Excel Office +4

NVD VulDB

CVSS 3.1

7.8

EPSS

0.9%

CVE-2021-43255 Dec 15, 15:15 MEDIUM PATCH This Month

Microsoft Office Trust Center Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

1.8%

CVE-2021-42295 Dec 15, 15:15 MEDIUM PATCH This Month

Visual Basic for Applications Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

7.3%

CVE-2021-42293 Dec 15, 15:15 MEDIUM PATCH This Month

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

6.5

EPSS

3.4%

CVE-2021-42296 Nov 10, 01:19 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Microsoft Code Injection 365 Apps Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

0.7%

CVE-2021-41368 Nov 10, 01:19 MEDIUM PATCH This Month

Microsoft Access Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

6.1

EPSS

3.5%

CVE-2021-40442 Nov 10, 01:19 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Excel Office +4

NVD VulDB

CVSS 3.1

7.8

EPSS

2.1%

CVE-2021-40485 Oct 13, 01:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Microsoft Code Injection 365 Apps Excel +4

NVD

CVSS 3.1

7.8

EPSS

2.5%

CVE-2021-40481 Oct 13, 01:15 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.1

EPSS

5.6%

CVE-2021-40480 Oct 13, 01:15 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

5.4%

CVE-2021-40479 Oct 13, 01:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

2.2%

CVE-2021-40474 Oct 13, 01:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Excel Office +3

NVD

CVSS 3.1

7.8

EPSS

2.2%

CVE-2021-40473 Oct 13, 01:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

2.2%

CVE-2021-40472 Oct 13, 01:15 MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft 365 Apps Excel Office +3

NVD

CVSS 3.1

5.5

EPSS

0.7%

CVE-2021-40471 Oct 13, 01:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

2.2%

CVE-2021-40454 Oct 13, 01:15 MEDIUM PATCH This Month

Rich Text Edit Control Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft 365 Apps Office Windows Server 2012 +8

NVD

CVSS 3.1

5.5

EPSS

0.5%

CVE-2021-38659 Sep 15, 12:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps

NVD VulDB

CVSS 3.1

7.8

EPSS

4.9%

CVE-2021-38657 Sep 15, 12:15 MEDIUM PATCH This Month

Microsoft Office Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity.

Information Disclosure Microsoft 365 Apps

NVD VulDB

CVSS 3.1

6.1

EPSS

0.8%

CVE-2021-38656 Sep 15, 12:15 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps

NVD VulDB

CVSS 3.1

7.8

EPSS

4.9%

CVE-2021-38655 Sep 15, 12:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +4

NVD VulDB

CVSS 3.1

7.8

EPSS

4.9%

CVE-2021-38654 Sep 15, 12:15 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office

NVD VulDB

CVSS 3.1

7.8

EPSS

4.9%

CVE-2021-38653 Sep 15, 12:15 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Microsoft 365 Apps +1

NVD VulDB

CVSS 3.1

7.8

EPSS

4.9%

CVE-2021-38650 Sep 15, 12:15 HIGH PATCH This Week

Microsoft Office Spoofing Vulnerability. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Microsoft 365 Apps Office

NVD VulDB

CVSS 3.1

7.6

EPSS

1.5%

CVE-2021-36941 Aug 12, 18:15 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office

NVD VulDB

CVSS 3.1

7.8

EPSS

2.0%

CVE-2021-34478 Aug 12, 18:15 HIGH PATCH Act Now

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office

NVD VulDB

CVSS 3.1

7.8

EPSS

54.4%

CVE-2021-34452 Jul 16, 21:15 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Word

NVD VulDB

CVSS 3.1

7.8

EPSS

2.0%

CVE-2021-34501 Jul 14, 18:15 HIGH PATCH Act Now

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Excel Office +1

NVD VulDB

CVSS 3.1

7.8

EPSS

53.2%

CVE-2021-34469 Jul 14, 18:15 HIGH PATCH This Week

Microsoft Office Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Office

NVD VulDB

CVSS 3.1

8.2

EPSS

3.3%

CVE-2021-31949 Jun 08, 23:15 HIGH PATCH This Week

Microsoft Outlook Remote Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Microsoft Code Injection Outlook 365 Apps +1

NVD

CVSS 3.1

7.3

EPSS

2.6%

CVE-2021-31941 Jun 08, 23:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Outlook 365 Apps Office

NVD

CVSS 3.1

7.8

EPSS

2.9%

CVE-2021-31940 Jun 08, 23:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office

NVD

CVSS 3.1

7.8

EPSS

2.3%

CVE-2021-31939 Jun 08, 23:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Excel Office +2

NVD

CVSS 3.1

7.8

EPSS

13.3%

CVE-2021-31180 May 11, 19:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Word

NVD

CVSS 3.1

7.8

EPSS

2.3%

CVE-2021-31179 May 11, 19:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Excel Office +2

NVD

CVSS 3.1

7.8

EPSS

13.5%

CVE-2021-31178 May 11, 19:15 MEDIUM PATCH This Month

Microsoft Office Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Integer Overflow Microsoft 365 Apps Excel +4

NVD

CVSS 3.1

5.5

EPSS

16.0%

CVE-2021-31177 May 11, 19:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +5

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-31176 May 11, 19:15 HIGH PATCH This Week

RCE Use After Free Memory Corruption Microsoft 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

3.0%

CVE-2021-31175 May 11, 19:15 HIGH PATCH This Week

RCE Use After Free Memory Corruption Microsoft 365 Apps +4

NVD

CVSS 3.1

7.8

EPSS

3.2%

CVE-2021-31174 May 11, 19:15 MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Microsoft 365 Apps Excel +3

NVD

CVSS 3.1

5.5

EPSS

2.9%

CVE-2021-28455 May 11, 19:15 HIGH PATCH This Week

Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft 365 Apps Office Windows Server 2008 +7

NVD

CVSS 3.1

8.8

EPSS

2.1%

CVE-2021-28456 Apr 13, 20:15 MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps Excel Office +2

NVD

CVSS 3.1

5.5

EPSS

3.7%

CVE-2021-28454 Apr 13, 20:15 HIGH PATCH This Week

RCE Use After Free Memory Corruption Microsoft 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-28453 Apr 13, 20:15 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Online Server +4

NVD

CVSS 3.1

7.8

EPSS

4.1%

CVE-2021-28452 Apr 13, 20:15 HIGH PATCH This Week

Microsoft Outlook Memory Corruption Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Microsoft Outlook 365 Apps +1

NVD

CVSS 3.1

7.1

EPSS

1.3%

CVE-2021-28451 Apr 13, 20:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Excel Office +2

NVD

CVSS 3.1

7.8

EPSS

2.4%

CVE-2021-28449 Apr 13, 20:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Excel Office

NVD

CVSS 3.1

7.8

EPSS

2.5%

CVE-2021-27058 Mar 11, 16:15 HIGH PATCH This Week

Microsoft Office ClickToRun Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps

NVD VulDB

CVSS 3.1

7.8

EPSS

3.5%

CVE-2021-27057 Mar 11, 16:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Excel Office +2

NVD VulDB

CVSS 3.1

7.8

EPSS

3.1%

CVE-2022-47213

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps

NVD

CVE-2022-47212

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps

NVD

CVE-2022-47211

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps

NVD

CVE-2022-44696

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-44695

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +3

NVD VulDB

CVE-2022-44694

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-44692

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-44691

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office OneNote Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-26806

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps

NVD

CVE-2022-26805

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps

NVD

CVE-2022-26804

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps

NVD

CVE-2022-41107

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-41106

EPSS 18% CVSS 8.8

HIGH Act Now

RCE Microsoft 365 Apps +5

NVD VulDB

CVE-2022-41105

EPSS 2% CVSS 5.5

MEDIUM This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +2

NVD VulDB

CVE-2022-41104

EPSS 3% CVSS 5.5

MEDIUM This Month

Microsoft Excel Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +3

NVD VulDB

CVE-2022-41103

EPSS 2% CVSS 5.5

MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +7

NVD VulDB

CVE-2022-41063

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +5

NVD VulDB

CVE-2022-41061

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection +8

NVD VulDB

CVE-2022-41060

EPSS 2% CVSS 5.5

MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +7

NVD VulDB

CVE-2022-41031

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-38049

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-38048

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-38001

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps +2

NVD

CVE-2022-38010

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +3

NVD

CVE-2022-37963

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-37962

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-34717

EPSS 2% CVSS 8.8

HIGH This Week

RCE Microsoft 365 Apps +2

NVD

CVE-2022-33631

EPSS 1% CVSS 7.3

HIGH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +3

NVD

CVE-2022-33632

EPSS 1% CVSS 4.7

MEDIUM This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.7), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +2

NVD

CVE-2022-30174

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +1

NVD

CVE-2022-29109

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +3

NVD VulDB

CVE-2022-29107

EPSS 8% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +4

NVD VulDB

CVE-2022-26934

EPSS 17% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure Microsoft 365 Apps +19

NVD VulDB

CVE-2022-26901

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +6

NVD VulDB

CVE-2022-24473

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24511

EPSS 1% CVSS 5.5

MEDIUM This Month

Microsoft Office Word Tampering Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +3

NVD VulDB

CVE-2022-24510

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24509

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24462

EPSS 1% CVSS 5.5

MEDIUM This Month

Microsoft Word Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24461

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-21841

EPSS 3% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2021-43875

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2021-43256

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +6

NVD VulDB

CVE-2021-43255

EPSS 2% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Office Trust Center Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps +2

NVD VulDB

CVE-2021-42295

EPSS 7% CVSS 5.5

MEDIUM PATCH This Month

Visual Basic for Applications Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps +2

NVD VulDB

CVE-2021-42293

EPSS 3% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure Microsoft 365 Apps +2

NVD VulDB

CVE-2021-42296

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Microsoft Code Injection +2

NVD VulDB

CVE-2021-41368

EPSS 4% CVSS 6.1

MEDIUM PATCH This Month

Microsoft Access Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2021-40442

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +6

NVD VulDB

CVE-2021-40485

EPSS 3% CVSS 7.8

HIGH PATCH This Week

RCE Microsoft Code Injection +6

NVD

CVE-2021-40481

EPSS 6% CVSS 7.1

HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2021-40480

EPSS 5% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2021-40479

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2021-40474

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +5

NVD

CVE-2021-40473

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2021-40472

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft 365 Apps +5

NVD

CVE-2021-40471

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2021-40454

EPSS 0% CVSS 5.5

MEDIUM PATCH This Month

Rich Text Edit Control Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft 365 Apps +10

NVD

CVE-2021-38659

EPSS 5% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps

NVD VulDB

CVE-2021-38657

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

Microsoft Office Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity.

Information Disclosure Microsoft 365 Apps

NVD VulDB

CVE-2021-38656

EPSS 5% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +2

NVD VulDB

CVE-2021-38655

EPSS 5% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +6

NVD VulDB

CVE-2021-38654

EPSS 5% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +1

NVD VulDB

CVE-2021-38653

EPSS 5% CVSS 7.8

HIGH PATCH This Week

RCE Buffer Overflow Memory Corruption +3

NVD VulDB

CVE-2021-38650

EPSS 1% CVSS 7.6

HIGH PATCH This Week

Microsoft Office Spoofing Vulnerability. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Microsoft 365 Apps +1

NVD VulDB

CVE-2021-36941

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +1

NVD VulDB

CVE-2021-34478

EPSS 54% CVSS 7.8

HIGH PATCH Act Now

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +1

NVD VulDB

CVE-2021-34452

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2021-34501

EPSS 53% CVSS 7.8

HIGH PATCH Act Now

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +3

NVD VulDB

CVE-2021-34469

EPSS 3% CVSS 8.2

HIGH PATCH This Week

Microsoft Office Security Feature Bypass Vulnerability. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +1

NVD VulDB

CVE-2021-31949

EPSS 3% CVSS 7.3

HIGH PATCH This Week

RCE Microsoft Code Injection +3

NVD

CVE-2021-31941

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Outlook +2

NVD

CVE-2021-31940

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +1

NVD

CVE-2021-31939

EPSS 13% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +4

NVD

CVE-2021-31180

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2021-31179

EPSS 13% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +4

NVD

CVE-2021-31178

EPSS 16% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Office Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Integer Overflow Microsoft +6

NVD

CVE-2021-31177

EPSS 3% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +7

NVD

CVE-2021-31176

EPSS 3% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +5

NVD

CVE-2021-31175

EPSS 3% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +6

NVD

CVE-2021-31174

EPSS 3% CVSS 5.5

MEDIUM PATCH This Month

Buffer Overflow Information Disclosure Microsoft +5

NVD

CVE-2021-28455

EPSS 2% CVSS 8.8

HIGH PATCH This Week

RCE Microsoft 365 Apps +9

NVD

CVE-2021-28456

EPSS 4% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps +4

NVD

CVE-2021-28454

EPSS 3% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +5

NVD

CVE-2021-28453

EPSS 4% CVSS 7.8

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +6

NVD

CVE-2021-28452

EPSS 1% CVSS 7.1

HIGH PATCH This Week

Buffer Overflow Memory Corruption Microsoft +3

NVD

CVE-2021-28451

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +4

NVD

CVE-2021-28449

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2021-27058

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Office ClickToRun Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps

NVD VulDB

CVE-2021-27057

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +4

NVD VulDB

Prev Page 6 of 7 Next