Office Long Term Servicing Channel

288 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-35636 Dec 12, 18:15 MEDIUM PATCH This Month

Microsoft Outlook Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

6.5

EPSS

17.6%

CVE-2023-35619 Dec 12, 18:15 MEDIUM PATCH This Month

Microsoft Outlook for Mac Spoofing Vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Office Long Term Servicing Channel

NVD

CVSS 3.1

5.3

EPSS

1.2%

CVE-2023-36413 Nov 14, 18:15 MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

6.5

EPSS

30.0%

CVE-2023-36045 Nov 14, 18:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.0%

CVE-2023-36041 Nov 14, 18:15 HIGH POC PATCH THREAT This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Use After Free Memory Corruption Microsoft 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

56.7%

CVE-2023-36037 Nov 14, 18:15 HIGH PATCH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Excel Office +1

NVD

CVSS 3.1

7.8

EPSS

1.2%

CVE-2023-36569 Oct 10, 18:15 HIGH PATCH This Week

Microsoft Office Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

Privilege Escalation Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

8.4

EPSS

0.6%

CVE-2023-36568 Oct 10, 18:15 HIGH PATCH This Week

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.0

EPSS

0.4%

CVE-2023-36565 Oct 10, 18:15 HIGH PATCH This Week

Microsoft Office Graphics Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Information Disclosure Use After Free Memory Corruption Microsoft Office +1

NVD VulDB

CVSS 3.1

7.0

EPSS

0.1%

CVE-2023-41764 Sep 12, 17:15 MEDIUM PATCH This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Jwt Attack 365 Apps Office +1

NVD

CVSS 3.1

5.5

EPSS

1.2%

CVE-2023-36767 Sep 12, 17:15 MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

4.3

EPSS

3.3%

CVE-2023-36766 Sep 12, 17:15 MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Microsoft 365 Apps Excel +3

NVD

CVSS 3.1

5.5

EPSS

1.5%

CVE-2023-36763 Sep 12, 17:15 HIGH PATCH This Week

Microsoft Outlook Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Microsoft Outlook 365 Apps Office +1

NVD

CVSS 3.1

7.5

EPSS

1.9%

CVE-2023-36762 Sep 12, 17:15 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +2

NVD

CVSS 3.1

7.3

EPSS

1.0%

CVE-2023-36897 Aug 08, 18:15 MEDIUM PATCH This Month

Visual Studio Tools for Office Runtime Spoofing Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +4

NVD VulDB

CVSS 3.1

6.5

EPSS

0.2%

CVE-2023-36896 Aug 08, 18:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +3

NVD VulDB

CVSS 3.1

7.8

EPSS

1.1%

CVE-2023-36895 Aug 08, 18:15 HIGH PATCH This Week

Microsoft Outlook Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD VulDB

CVSS 3.1

7.8

EPSS

1.2%

CVE-2023-36893 Aug 08, 18:15 MEDIUM PATCH This Month

Microsoft Outlook Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Outlook 365 Apps Office +1

NVD

CVSS 3.1

6.5

EPSS

2.0%

CVE-2023-36866 Aug 08, 18:15 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

RCE Integer Overflow Microsoft 365 Apps Office +1

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-36865 Aug 08, 18:15 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-35372 Aug 08, 18:15 HIGH PATCH This Week

RCE Integer Overflow Microsoft 365 Apps Office +1

NVD VulDB

CVSS 3.1

7.8

EPSS

1.1%

CVE-2023-35371 Aug 08, 18:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

7.8

EPSS

1.1%

CVE-2023-33162 Jul 11, 18:15 MEDIUM PATCH This Month

Buffer Overflow Information Disclosure Microsoft 365 Apps Office +2

NVD

CVSS 3.1

5.5

EPSS

0.9%

CVE-2023-33161 Jul 11, 18:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

0.9%

CVE-2023-33158 Jul 11, 18:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Integer Overflow Microsoft 365 Apps Office +1

NVD VulDB

CVSS 3.1

7.8

EPSS

0.4%

CVE-2023-33153 Jul 11, 18:15 MEDIUM PATCH This Month

Microsoft Outlook Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD VulDB

CVSS 3.1

6.8

EPSS

0.5%

CVE-2023-33152 Jul 11, 18:15 HIGH PATCH This Week

Microsoft ActiveX Remote Code Execution Vulnerability. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD VulDB

CVSS 3.1

7.0

EPSS

1.1%

CVE-2023-33151 Jul 11, 18:15 MEDIUM PATCH This Month

Microsoft Outlook Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

6.5

EPSS

0.6%

CVE-2023-33150 Jul 11, 18:15 CRITICAL PATCH Act Now

Microsoft Office Security Feature Bypass Vulnerability. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD

CVSS 3.1

9.6

EPSS

0.2%

CVE-2023-33149 Jul 11, 18:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD VulDB

CVSS 3.1

7.8

EPSS

0.9%

CVE-2023-33148 Jul 11, 18:15 HIGH POC PATCH This Week

Microsoft Office Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

1.7%

CVE-2023-28295 Jun 17, 01:15 HIGH PATCH This Week

Microsoft Publisher Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

RCE Integer Overflow Microsoft 365 Apps Office +2

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-28287 Jun 17, 01:15 HIGH PATCH This Week

Microsoft Publisher Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-33146 Jun 14, 00:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-33133 Jun 14, 00:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

44.0%

CVE-2023-33131 Jun 14, 00:15 HIGH POC PATCH This Week

Microsoft Outlook Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Microsoft Code Injection Outlook Office +2

NVD Exploit-DB

CVSS 3.1

8.8

EPSS

5.7%

CVE-2023-32029 Jun 14, 00:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

RCE Buffer Overflow Information Disclosure Microsoft 365 Apps +4

NVD

CVSS 3.1

7.8

EPSS

53.5%

CVE-2023-29344 Jun 05, 19:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.9%

CVE-2023-29335 May 09, 18:15 HIGH PATCH This Week

Microsoft Word Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel +13

NVD VulDB

CVSS 3.1

7.5

EPSS

0.5%

CVE-2023-29333 May 09, 18:15 LOW PATCH Monitor

Microsoft Access Denial of Service Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

3.3

EPSS

0.5%

CVE-2023-24953 May 09, 18:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +4

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-28311 Apr 11, 21:15 HIGH POC PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

2.7%

CVE-2023-28285 Apr 11, 21:15 HIGH POC PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

3.0%

CVE-2023-24910 Mar 14, 17:15 HIGH PATCH This Week

Windows Graphics Component Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Null Pointer Dereference Microsoft Office Office Long Term Servicing Channel +13

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2023-23399 Mar 14, 17:15 HIGH POC PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Information Disclosure Microsoft 365 Apps +5

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

2.5%

CVE-2023-23398 Mar 14, 17:15 HIGH PATCH This Week

Microsoft Excel Spoofing Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Excel Office +1

NVD

CVSS 3.1

7.1

EPSS

1.1%

CVE-2023-21716 Feb 14, 20:15 CRITICAL POC PATCH THREAT Act Now

Microsoft Word Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Integer Overflow Microsoft Office Office Long Term Servicing Channel +6

NVD VulDB

CVSS 3.1

9.8

EPSS

82.3%

Threat

5.9

CVE-2023-21714 Feb 14, 20:15 MEDIUM PATCH This Month

Microsoft Office Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Microsoft 365 Apps Office Long Term Servicing Channel

NVD

CVSS 3.1

5.5

EPSS

0.6%

CVE-2023-21741 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Information Disclosure Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft 365 Apps Office +2

NVD

CVSS 3.1

7.1

EPSS

1.8%

CVE-2023-21738 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21737 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21736 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21735 Jan 10, 22:15 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21734 Jan 10, 22:15 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.9%

CVE-2022-44713 Dec 13, 19:15 HIGH This Week

Microsoft Outlook for Mac Spoofing Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.5

EPSS

1.5%

CVE-2022-44696 Dec 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

2.3%

CVE-2022-44695 Dec 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

7.8

EPSS

2.3%

CVE-2022-44694 Dec 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.6%

CVE-2022-44692 Dec 13, 19:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-44691 Dec 13, 19:15 HIGH This Week

Microsoft Office OneNote Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

0.9%

CVE-2022-41107 Nov 09, 22:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

2.2%

CVE-2022-41106 Nov 09, 22:15 HIGH Act Now

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 17.6% and no vendor patch available.

RCE Microsoft 365 Apps Excel Office +3

NVD VulDB

CVSS 3.1

8.8

EPSS

17.6%

CVE-2022-41105 Nov 09, 22:15 MEDIUM This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

1.7%

CVE-2022-41104 Nov 09, 22:15 MEDIUM This Month

Microsoft Excel Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Excel Office +1

NVD VulDB

CVSS 3.1

5.5

EPSS

2.5%

CVE-2022-41103 Nov 09, 22:15 MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +5

NVD VulDB

CVSS 3.1

5.5

EPSS

1.6%

CVE-2022-41063 Nov 09, 22:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Excel Office +3

NVD VulDB

CVSS 3.1

7.8

EPSS

2.3%

CVE-2022-41061 Nov 09, 22:15 HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection 365 Apps Office +6

NVD VulDB

CVSS 3.1

7.8

EPSS

1.2%

CVE-2022-41060 Nov 09, 22:15 MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +5

NVD VulDB

CVSS 3.1

5.5

EPSS

1.7%

CVE-2022-41043 Oct 11, 19:15 LOW PATCH Monitor

Microsoft Office Information Disclosure Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Information Disclosure Microsoft Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

3.3

EPSS

0.8%

CVE-2022-41031 Oct 11, 19:15 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-38049 Oct 11, 19:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-38048 Oct 11, 19:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.5%

CVE-2022-38001 Oct 11, 19:15 MEDIUM PATCH This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

6.5

EPSS

1.4%

CVE-2022-38010 Sep 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-37963 Sep 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.0%

CVE-2022-37962 Sep 13, 19:15 HIGH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.2%

CVE-2022-34717 Aug 09, 20:15 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2022-33631 Aug 09, 20:15 HIGH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Excel Office +1

NVD

CVSS 3.1

7.3

EPSS

0.8%

CVE-2022-33632 Jul 12, 23:15 MEDIUM This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.7), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

4.7

EPSS

1.1%

CVE-2022-30174 Jun 15, 22:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2022-29109 May 10, 21:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

7.8

EPSS

2.4%

CVE-2022-29107 May 10, 21:15 MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel +2

NVD VulDB

CVSS 3.1

5.5

EPSS

7.7%

CVE-2022-26934 May 10, 21:15 MEDIUM PATCH This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 17.4%.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +17

NVD VulDB

CVSS 3.1

6.5

EPSS

17.4%

CVE-2022-26901 Apr 15, 19:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Excel Office +4

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-24473 Apr 15, 19:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

2.4%

CVE-2022-24511 Mar 09, 17:15 MEDIUM This Month

Microsoft Office Word Tampering Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

5.5

EPSS

0.7%

CVE-2022-24510 Mar 09, 17:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-24509 Mar 09, 17:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-24462 Mar 09, 17:15 MEDIUM This Month

Microsoft Word Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

0.8%

CVE-2022-24461 Mar 09, 17:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2023-35636

EPSS 18% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure Microsoft 365 Apps +2

NVD

CVE-2023-35619

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Microsoft Outlook for Mac Spoofing Vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Office Long Term Servicing Channel

NVD

CVE-2023-36413

EPSS 30% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +2

NVD

CVE-2023-36045

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2023-36041

EPSS 57% CVSS 7.8

HIGH POC PATCH THREAT This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Use After Free Memory Corruption +5

NVD

CVE-2023-36037

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +3

NVD

CVE-2023-36569

EPSS 1% CVSS 8.4

HIGH PATCH This Week

Privilege Escalation Microsoft 365 Apps +2

NVD

CVE-2023-36568

EPSS 0% CVSS 7.0

HIGH PATCH This Week

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Microsoft 365 Apps +2

NVD

CVE-2023-36565

EPSS 0% CVSS 7.0

HIGH PATCH This Week

Information Disclosure Use After Free Memory Corruption +3

NVD VulDB

CVE-2023-41764

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Jwt Attack +3

NVD

CVE-2023-36767

EPSS 3% CVSS 4.3

MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +2

NVD

CVE-2023-36766

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Buffer Overflow Information Disclosure Microsoft +5

NVD

CVE-2023-36763

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Information Disclosure Microsoft Outlook +3

NVD

CVE-2023-36762

EPSS 1% CVSS 7.3

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +4

NVD

CVE-2023-36897

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

Visual Studio Tools for Office Runtime Spoofing Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps +6

NVD VulDB

CVE-2023-36896

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +5

NVD VulDB

CVE-2023-36895

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +4

NVD VulDB

CVE-2023-36893

EPSS 2% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Outlook Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Outlook +3

NVD

CVE-2023-36866

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Integer Overflow Microsoft +3

NVD VulDB

CVE-2023-36865

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +4

NVD VulDB

CVE-2023-35372

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Integer Overflow Microsoft +3

NVD VulDB

CVE-2023-35371

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +3

NVD VulDB

CVE-2023-33162

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Buffer Overflow Information Disclosure Microsoft +4

NVD

CVE-2023-33161

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2023-33158

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Integer Overflow Microsoft +3

NVD VulDB

CVE-2023-33153

EPSS 0% CVSS 6.8

MEDIUM PATCH This Month

RCE Use After Free Memory Corruption +4

NVD VulDB

CVE-2023-33152

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Microsoft ActiveX Remote Code Execution Vulnerability. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.

RCE Buffer Overflow Heap Overflow +4

NVD VulDB

CVE-2023-33151

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Outlook Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps +2

NVD

CVE-2023-33150

EPSS 0% CVSS 9.6

CRITICAL PATCH Act Now

Microsoft Office Security Feature Bypass Vulnerability. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +3

NVD

CVE-2023-33149

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +4

NVD VulDB

CVE-2023-33148

EPSS 2% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Office Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Microsoft 365 Apps +2

NVD Exploit-DB

CVE-2023-28295

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Integer Overflow Microsoft +4

NVD

CVE-2023-28287

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +5

NVD

CVE-2023-33146

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2023-33133

EPSS 44% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +5

NVD

CVE-2023-33131

EPSS 6% CVSS 8.8

HIGH POC PATCH This Week

RCE Microsoft Code Injection +4

NVD Exploit-DB

CVE-2023-32029

EPSS 54% CVSS 7.8

HIGH PATCH This Week

RCE Buffer Overflow Information Disclosure +6

NVD

CVE-2023-29344

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2023-29335

EPSS 0% CVSS 7.5

HIGH PATCH This Week

Microsoft Word Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Microsoft 365 Apps +15

NVD VulDB

CVE-2023-29333

EPSS 0% CVSS 3.3

LOW PATCH Monitor

Denial Of Service Microsoft 365 Apps +2

NVD

CVE-2023-24953

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +6

NVD

CVE-2023-28311

EPSS 3% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Heap Overflow +4

NVD Exploit-DB

CVE-2023-28285

EPSS 3% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Use After Free Memory Corruption +4

NVD Exploit-DB

CVE-2023-24910

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Denial Of Service Null Pointer Dereference Microsoft +15

NVD

CVE-2023-23399

EPSS 3% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Information Disclosure +7

NVD Exploit-DB

CVE-2023-23398

EPSS 1% CVSS 7.1

HIGH PATCH This Week

Microsoft Excel Spoofing Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +3

NVD

CVE-2023-21716

EPSS 82% 5.9 CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

RCE Integer Overflow Microsoft +8

NVD VulDB

CVE-2023-21714

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Buffer Overflow Information Disclosure Microsoft +2

NVD

CVE-2023-21741

EPSS 2% CVSS 7.1

HIGH This Week

Microsoft Office Visio Information Disclosure Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +4

NVD

CVE-2023-21738

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2023-21737

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +5

NVD

CVE-2023-21736

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +3

NVD

CVE-2023-21735

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +4

NVD

CVE-2023-21734

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +4

NVD

CVE-2022-44713

EPSS 1% CVSS 7.5

HIGH This Week

Authentication Bypass Microsoft Office +1

NVD

CVE-2022-44696

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-44695

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +3

NVD VulDB

CVE-2022-44694

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-44692

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-44691

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office OneNote Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-41107

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-41106

EPSS 18% CVSS 8.8

HIGH Act Now

RCE Microsoft 365 Apps +5

NVD VulDB

CVE-2022-41105

EPSS 2% CVSS 5.5

MEDIUM This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +2

NVD VulDB

CVE-2022-41104

EPSS 3% CVSS 5.5

MEDIUM This Month

Microsoft Excel Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +3

NVD VulDB

CVE-2022-41103

EPSS 2% CVSS 5.5

MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +7

NVD VulDB

CVE-2022-41063

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +5

NVD VulDB

CVE-2022-41061

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection +8

NVD VulDB

CVE-2022-41060

EPSS 2% CVSS 5.5

MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +7

NVD VulDB

CVE-2022-41043

EPSS 1% CVSS 3.3

LOW PATCH Monitor

Microsoft Office Information Disclosure Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Information Disclosure Microsoft Office +1

NVD VulDB

CVE-2022-41031

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-38049

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-38048

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-38001

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps +2

NVD

CVE-2022-38010

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +3

NVD

CVE-2022-37963

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-37962

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-34717

EPSS 2% CVSS 8.8

HIGH This Week

RCE Microsoft 365 Apps +2

NVD

CVE-2022-33631

EPSS 1% CVSS 7.3

HIGH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +3

NVD

CVE-2022-33632

EPSS 1% CVSS 4.7

MEDIUM This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.7), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +2

NVD

CVE-2022-30174

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +1

NVD

CVE-2022-29109

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +3

NVD VulDB

CVE-2022-29107

EPSS 8% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +4

NVD VulDB

CVE-2022-26934

EPSS 17% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure Microsoft 365 Apps +19

NVD VulDB

CVE-2022-26901

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +6

NVD VulDB

CVE-2022-24473

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24511

EPSS 1% CVSS 5.5

MEDIUM This Month

Microsoft Office Word Tampering Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +3

NVD VulDB

CVE-2022-24510

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24509

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24462

EPSS 1% CVSS 5.5

MEDIUM This Month

Microsoft Word Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24461

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

Prev Page 3 of 4 Next