Office

748 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-36897 Aug 08, 18:15 MEDIUM PATCH This Month

Visual Studio Tools for Office Runtime Spoofing Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +4

NVD VulDB

CVSS 3.1

6.5

EPSS

0.2%

CVE-2023-36896 Aug 08, 18:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +3

NVD VulDB

CVSS 3.1

7.8

EPSS

1.1%

CVE-2023-36895 Aug 08, 18:15 HIGH PATCH This Week

Microsoft Outlook Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD VulDB

CVSS 3.1

7.8

EPSS

1.2%

CVE-2023-36893 Aug 08, 18:15 MEDIUM PATCH This Month

Microsoft Outlook Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Outlook 365 Apps Office +1

NVD

CVSS 3.1

6.5

EPSS

2.0%

CVE-2023-36866 Aug 08, 18:15 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

RCE Integer Overflow Microsoft 365 Apps Office +1

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-36865 Aug 08, 18:15 HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-35372 Aug 08, 18:15 HIGH PATCH This Week

RCE Integer Overflow Microsoft 365 Apps Office +1

NVD VulDB

CVSS 3.1

7.8

EPSS

1.1%

CVE-2023-35371 Aug 08, 18:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

7.8

EPSS

1.1%

CVE-2023-33162 Jul 11, 18:15 MEDIUM PATCH This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Microsoft 365 Apps Office +2

NVD

CVSS 3.1

5.5

EPSS

0.9%

CVE-2023-33161 Jul 11, 18:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

0.9%

CVE-2023-33158 Jul 11, 18:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Integer Overflow Microsoft 365 Apps Office +1

NVD VulDB

CVSS 3.1

7.8

EPSS

0.4%

CVE-2023-33153 Jul 11, 18:15 MEDIUM PATCH This Month

Microsoft Outlook Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD VulDB

CVSS 3.1

6.8

EPSS

0.5%

CVE-2023-33152 Jul 11, 18:15 HIGH PATCH This Week

Microsoft ActiveX Remote Code Execution Vulnerability. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD VulDB

CVSS 3.1

7.0

EPSS

1.1%

CVE-2023-33151 Jul 11, 18:15 MEDIUM PATCH This Month

Microsoft Outlook Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

6.5

EPSS

0.6%

CVE-2023-33150 Jul 11, 18:15 CRITICAL PATCH Act Now

Microsoft Office Security Feature Bypass Vulnerability. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD

CVSS 3.1

9.6

EPSS

0.2%

CVE-2023-33149 Jul 11, 18:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD VulDB

CVSS 3.1

7.8

EPSS

0.9%

CVE-2023-33148 Jul 11, 18:15 HIGH POC PATCH This Week

Microsoft Office Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

1.7%

CVE-2023-28295 Jun 17, 01:15 HIGH PATCH This Week

Microsoft Publisher Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

RCE Integer Overflow Microsoft 365 Apps Office +2

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-28287 Jun 17, 01:15 HIGH PATCH This Week

Microsoft Publisher Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-33146 Jun 14, 00:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-33137 Jun 14, 00:15 HIGH POC PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Microsoft Office Office Online Server

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

2.7%

CVE-2023-33131 Jun 14, 00:15 HIGH POC PATCH This Week

Microsoft Outlook Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Microsoft Code Injection Outlook Office +2

NVD Exploit-DB

CVSS 3.1

8.8

EPSS

5.7%

CVE-2023-32029 Jun 14, 00:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

RCE Buffer Overflow Information Disclosure Microsoft 365 Apps +4

NVD

CVSS 3.1

7.8

EPSS

53.5%

CVE-2023-29344 Jun 05, 19:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.9%

CVE-2023-29335 May 09, 18:15 HIGH PATCH This Week

Microsoft Word Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel +13

NVD VulDB

CVSS 3.1

7.5

EPSS

0.5%

CVE-2023-29333 May 09, 18:15 LOW PATCH Monitor

Microsoft Access Denial of Service Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

3.3

EPSS

0.5%

CVE-2023-24953 May 09, 18:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft 365 Apps +4

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-28311 Apr 11, 21:15 HIGH POC PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

2.7%

CVE-2023-28285 Apr 11, 21:15 HIGH POC PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

3.0%

CVE-2023-24910 Mar 14, 17:15 HIGH PATCH This Week

Windows Graphics Component Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Null Pointer Dereference Microsoft Office Office Long Term Servicing Channel +13

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2023-23399 Mar 14, 17:15 HIGH POC PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Information Disclosure Microsoft 365 Apps +5

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

2.5%

CVE-2023-23398 Mar 14, 17:15 HIGH PATCH This Week

Microsoft Excel Spoofing Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Excel Office +1

NVD

CVSS 3.1

7.1

EPSS

1.1%

CVE-2023-23391 Mar 14, 17:15 MEDIUM PATCH This Month

Office for Android Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Google Microsoft Office

NVD VulDB

CVSS 3.1

5.5

EPSS

1.2%

CVE-2023-21716 Feb 14, 20:15 CRITICAL POC PATCH THREAT Act Now

Microsoft Word Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Integer Overflow Microsoft Office Office Long Term Servicing Channel +6

NVD VulDB

CVSS 3.1

9.8

EPSS

82.3%

Threat

5.9

CVE-2023-21741 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Information Disclosure Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft 365 Apps Office +2

NVD

CVSS 3.1

7.1

EPSS

1.8%

CVE-2023-21738 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21737 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21736 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21735 Jan 10, 22:15 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21734 Jan 10, 22:15 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.9%

CVE-2022-44713 Dec 13, 19:15 HIGH This Week

Microsoft Outlook for Mac Spoofing Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.5

EPSS

1.5%

CVE-2022-44696 Dec 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

2.3%

CVE-2022-44695 Dec 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

7.8

EPSS

2.3%

CVE-2022-44694 Dec 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.6%

CVE-2022-44692 Dec 13, 19:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-44691 Dec 13, 19:15 HIGH This Week

Microsoft Office OneNote Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.9%

CVE-2022-41107 Nov 09, 22:15 HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

2.2%

CVE-2022-41106 Nov 09, 22:15 HIGH Act Now

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 17.6% and no vendor patch available.

RCE Microsoft 365 Apps Excel Office +3

NVD VulDB

CVSS 3.1

8.8

EPSS

17.6%

CVE-2022-41105 Nov 09, 22:15 MEDIUM This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

1.7%

CVE-2022-41104 Nov 09, 22:15 MEDIUM This Month

Microsoft Excel Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Excel Office +1

NVD VulDB

CVSS 3.1

5.5

EPSS

2.5%

CVE-2022-41103 Nov 09, 22:15 MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +5

NVD VulDB

CVSS 3.1

5.5

EPSS

1.6%

CVE-2022-41063 Nov 09, 22:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Excel Office +3

NVD VulDB

CVSS 3.1

7.8

EPSS

2.3%

CVE-2022-41061 Nov 09, 22:15 HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection 365 Apps Office +6

NVD VulDB

CVSS 3.1

7.8

EPSS

1.2%

CVE-2022-41060 Nov 09, 22:15 MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +5

NVD VulDB

CVSS 3.1

5.5

EPSS

1.7%

CVE-2022-41043 Oct 11, 19:15 LOW PATCH Monitor

Microsoft Office Information Disclosure Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Information Disclosure Microsoft Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

3.3

EPSS

0.8%

CVE-2022-41031 Oct 11, 19:15 HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-38049 Oct 11, 19:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-38048 Oct 11, 19:15 HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.5%

CVE-2022-38001 Oct 11, 19:15 MEDIUM PATCH This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

6.5

EPSS

1.4%

CVE-2022-38010 Sep 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-37963 Sep 13, 19:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.0%

CVE-2022-37962 Sep 13, 19:15 HIGH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

7.8

EPSS

1.2%

CVE-2022-33311 Aug 18, 08:15 MEDIUM This Month

Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Office Cybozu

NVD

CVSS 3.1

4.3

EPSS

0.7%

CVE-2022-33151 Aug 18, 08:15 MEDIUM This Month

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitrary script via unspecified vectors. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Microsoft Office Cybozu

NVD

CVSS 3.1

6.1

EPSS

0.5%

CVE-2022-32583 Aug 18, 08:15 MEDIUM This Month

Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Scheduler via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Office Cybozu

NVD

CVSS 3.1

4.3

EPSS

0.7%

CVE-2022-32544 Aug 18, 08:15 MEDIUM This Month

Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Office Cybozu

NVD

CVSS 3.1

4.3

EPSS

0.7%

CVE-2022-32453 Aug 18, 08:15 MEDIUM This Month

HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the product via unspecified vectors. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Microsoft Code Injection Office Cybozu

NVD

CVSS 3.1

6.5

EPSS

0.6%

CVE-2022-32283 Aug 18, 08:15 MEDIUM This Month

Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Office Cybozu

NVD

CVSS 3.1

4.3

EPSS

0.7%

CVE-2022-30693 Aug 18, 08:15 MEDIUM This Month

Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to obtain the data of the product via unspecified vectors. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Office Cybozu

NVD

CVSS 3.1

5.3

EPSS

0.8%

CVE-2022-30604 Aug 18, 08:15 MEDIUM This Month

Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Microsoft Office Cybozu

NVD

CVSS 3.1

6.1

EPSS

0.5%

CVE-2022-29891 Aug 18, 08:15 MEDIUM This Month

Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified vectors. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Office Cybozu

NVD

CVSS 3.1

4.3

EPSS

0.7%

CVE-2022-29487 Aug 18, 08:15 MEDIUM This Month

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified vectors. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Microsoft Office Cybozu

NVD

CVSS 3.1

6.1

EPSS

0.5%

CVE-2022-28715 Aug 18, 08:15 MEDIUM This Month

XSS Microsoft Office Cybozu

NVD

CVSS 3.1

6.1

EPSS

0.5%

CVE-2022-25986 Aug 18, 08:15 MEDIUM This Month

Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Office Cybozu

NVD

CVSS 3.1

4.3

EPSS

0.7%

CVE-2022-34717 Aug 09, 20:15 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2022-33631 Aug 09, 20:15 HIGH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Excel Office +1

NVD

CVSS 3.1

7.3

EPSS

0.8%

CVE-2022-33632 Jul 12, 23:15 MEDIUM This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.7), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD

CVSS 3.1

4.7

EPSS

1.1%

CVE-2022-29109 May 10, 21:15 HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

7.8

EPSS

2.4%

CVE-2022-29107 May 10, 21:15 MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel +2

NVD VulDB

CVSS 3.1

5.5

EPSS

7.7%

CVE-2022-26934 May 10, 21:15 MEDIUM PATCH This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 17.4%.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +17

NVD VulDB

CVSS 3.1

6.5

EPSS

17.4%

CVE-2022-26901 Apr 15, 19:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Excel Office +4

NVD VulDB

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-24473 Apr 15, 19:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

2.4%

CVE-2022-24511 Mar 09, 17:15 MEDIUM This Month

Microsoft Office Word Tampering Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD VulDB

CVSS 3.1

5.5

EPSS

0.7%

CVE-2022-24510 Mar 09, 17:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-24509 Mar 09, 17:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-24462 Mar 09, 17:15 MEDIUM This Month

Microsoft Word Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

5.5

EPSS

0.8%

CVE-2022-24461 Mar 09, 17:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.4%

CVE-2022-21841 Jan 11, 21:15 HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

3.1%

CVE-2022-21840 Jan 11, 21:15 HIGH This Week

RCE Microsoft Excel Office Office Long Term Servicing Channel +4

NVD VulDB

CVSS 3.1

8.8

EPSS

9.5%

CVE-2021-43875 Dec 15, 15:15 HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel

NVD VulDB

CVSS 3.1

7.8

EPSS

1.1%

CVE-2023-36897

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

Visual Studio Tools for Office Runtime Spoofing Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps +6

NVD VulDB

CVE-2023-36896

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +5

NVD VulDB

CVE-2023-36895

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +4

NVD VulDB

CVE-2023-36893

EPSS 2% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Outlook Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft Outlook +3

NVD

CVE-2023-36866

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Integer Overflow Microsoft +3

NVD VulDB

CVE-2023-36865

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +4

NVD VulDB

CVE-2023-35372

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Integer Overflow Microsoft +3

NVD VulDB

CVE-2023-35371

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +3

NVD VulDB

CVE-2023-33162

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Buffer Overflow Information Disclosure Microsoft +4

NVD

CVE-2023-33161

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2023-33158

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Integer Overflow Microsoft +3

NVD VulDB

CVE-2023-33153

EPSS 0% CVSS 6.8

MEDIUM PATCH This Month

RCE Use After Free Memory Corruption +4

NVD VulDB

CVE-2023-33152

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Microsoft ActiveX Remote Code Execution Vulnerability. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.

RCE Buffer Overflow Heap Overflow +4

NVD VulDB

CVE-2023-33151

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Outlook Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps +2

NVD

CVE-2023-33150

EPSS 0% CVSS 9.6

CRITICAL PATCH Act Now

Microsoft Office Security Feature Bypass Vulnerability. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +3

NVD

CVE-2023-33149

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +4

NVD VulDB

CVE-2023-33148

EPSS 2% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Office Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Microsoft 365 Apps +2

NVD Exploit-DB

CVE-2023-28295

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Integer Overflow Microsoft +4

NVD

CVE-2023-28287

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +5

NVD

CVE-2023-33146

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2023-33137

EPSS 3% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Microsoft Office +1

NVD Exploit-DB

CVE-2023-33131

EPSS 6% CVSS 8.8

HIGH POC PATCH This Week

RCE Microsoft Code Injection +4

NVD Exploit-DB

CVE-2023-32029

EPSS 54% CVSS 7.8

HIGH PATCH This Week

RCE Buffer Overflow Information Disclosure +6

NVD

CVE-2023-29344

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2023-29335

EPSS 0% CVSS 7.5

HIGH PATCH This Week

Microsoft Word Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Microsoft 365 Apps +15

NVD VulDB

CVE-2023-29333

EPSS 0% CVSS 3.3

LOW PATCH Monitor

Denial Of Service Microsoft 365 Apps +2

NVD

CVE-2023-24953

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Use After Free Memory Corruption +6

NVD

CVE-2023-28311

EPSS 3% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Heap Overflow +4

NVD Exploit-DB

CVE-2023-28285

EPSS 3% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Use After Free Memory Corruption +4

NVD Exploit-DB

CVE-2023-24910

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Denial Of Service Null Pointer Dereference Microsoft +15

NVD

CVE-2023-23399

EPSS 3% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Information Disclosure +7

NVD Exploit-DB

CVE-2023-23398

EPSS 1% CVSS 7.1

HIGH PATCH This Week

Microsoft Excel Spoofing Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +3

NVD

CVE-2023-23391

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Office for Android Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Google Microsoft +1

NVD VulDB

CVE-2023-21716

EPSS 82% 5.9 CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

RCE Integer Overflow Microsoft +8

NVD VulDB

CVE-2023-21741

EPSS 2% CVSS 7.1

HIGH This Week

Microsoft Office Visio Information Disclosure Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +4

NVD

CVE-2023-21738

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +4

NVD

CVE-2023-21737

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +5

NVD

CVE-2023-21736

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +3

NVD

CVE-2023-21735

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +4

NVD

CVE-2023-21734

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +4

NVD

CVE-2022-44713

EPSS 1% CVSS 7.5

HIGH This Week

Authentication Bypass Microsoft Office +1

NVD

CVE-2022-44696

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-44695

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +3

NVD VulDB

CVE-2022-44694

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-44692

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-44691

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office OneNote Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-41107

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-41106

EPSS 18% CVSS 8.8

HIGH Act Now

RCE Microsoft 365 Apps +5

NVD VulDB

CVE-2022-41105

EPSS 2% CVSS 5.5

MEDIUM This Month

Microsoft Excel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +2

NVD VulDB

CVE-2022-41104

EPSS 3% CVSS 5.5

MEDIUM This Month

Microsoft Excel Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +3

NVD VulDB

CVE-2022-41103

EPSS 2% CVSS 5.5

MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +7

NVD VulDB

CVE-2022-41063

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +5

NVD VulDB

CVE-2022-41061

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection +8

NVD VulDB

CVE-2022-41060

EPSS 2% CVSS 5.5

MEDIUM This Month

Microsoft Word Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +7

NVD VulDB

CVE-2022-41043

EPSS 1% CVSS 3.3

LOW PATCH Monitor

Microsoft Office Information Disclosure Vulnerability. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Information Disclosure Microsoft Office +1

NVD VulDB

CVE-2022-41031

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-38049

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-38048

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-38001

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Microsoft 365 Apps +2

NVD

CVE-2022-38010

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +3

NVD

CVE-2022-37963

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-37962

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD

CVE-2022-33311

EPSS 1% CVSS 4.3

MEDIUM This Month

Authentication Bypass Microsoft Office +1

NVD

CVE-2022-33151

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Microsoft Office +1

NVD

CVE-2022-32583

EPSS 1% CVSS 4.3

MEDIUM This Month

Authentication Bypass Microsoft Office +1

NVD

CVE-2022-32544

EPSS 1% CVSS 4.3

MEDIUM This Month

Authentication Bypass Microsoft Office +1

NVD

CVE-2022-32453

EPSS 1% CVSS 6.5

MEDIUM This Month

Microsoft Code Injection Office +1

NVD

CVE-2022-32283

EPSS 1% CVSS 4.3

MEDIUM This Month

Authentication Bypass Microsoft Office +1

NVD

CVE-2022-30693

EPSS 1% CVSS 5.3

MEDIUM This Month

Information Disclosure Microsoft Office +1

NVD

CVE-2022-30604

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Microsoft Office +1

NVD

CVE-2022-29891

EPSS 1% CVSS 4.3

MEDIUM This Month

Authentication Bypass Microsoft Office +1

NVD

CVE-2022-29487

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Microsoft Office +1

NVD

CVE-2022-28715

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Microsoft Office +1

NVD

CVE-2022-25986

EPSS 1% CVSS 4.3

MEDIUM This Month

Authentication Bypass Microsoft Office +1

NVD

CVE-2022-34717

EPSS 2% CVSS 8.8

HIGH This Week

RCE Microsoft 365 Apps +2

NVD

CVE-2022-33631

EPSS 1% CVSS 7.3

HIGH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +3

NVD

CVE-2022-33632

EPSS 1% CVSS 4.7

MEDIUM This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.7), this vulnerability is no authentication required. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +2

NVD

CVE-2022-29109

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +3

NVD VulDB

CVE-2022-29107

EPSS 8% CVSS 5.5

MEDIUM PATCH This Month

Microsoft Office Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft 365 Apps +4

NVD VulDB

CVE-2022-26934

EPSS 17% CVSS 6.5

MEDIUM PATCH This Month

Information Disclosure Microsoft 365 Apps +19

NVD VulDB

CVE-2022-26901

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +6

NVD VulDB

CVE-2022-24473

EPSS 2% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24511

EPSS 1% CVSS 5.5

MEDIUM This Month

Microsoft Office Word Tampering Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft 365 Apps +3

NVD VulDB

CVE-2022-24510

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24509

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24462

EPSS 1% CVSS 5.5

MEDIUM This Month

Microsoft Word Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps +2

NVD VulDB

CVE-2022-24461

EPSS 1% CVSS 7.8

HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-21841

EPSS 3% CVSS 7.8

HIGH This Week

Microsoft Excel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps +2

NVD VulDB

CVE-2022-21840

EPSS 9% CVSS 8.8

HIGH This Week

RCE Microsoft Excel +6

NVD VulDB

CVE-2021-43875

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft Office Graphics Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft 365 Apps +2

NVD VulDB

Prev Page 3 of 9 Next