Skip to main content

Polarisoffice

4 CVEs vendor

Monthly

CVE-2021-34280 Jun 08, 15:15 HIGH This Week

Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Memory Corruption Microsoft Polaris Office Polarisoffice
NVD GitHub
CVSS 3.1
7.8
EPSS
1.3%
CVE-2021-27550 Feb 23, 15:15 MEDIUM POC This Month

Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Microsoft Polaris Office Polarisoffice
NVD GitHub
CVSS 3.1
5.5
EPSS
1.7%
CVE-2020-7837 Dec 16, 17:15 HIGH This Week

An issue was discovered in ML Report Program. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Polaris Ml Report Polarisoffice
NVD
CVSS 3.1
8.8
EPSS
0.7%
CVE-2018-12589 Jun 28, 14:29 HIGH POC THREAT This Week

Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Microsoft Polaris Office 2017 Polarisoffice
NVD Exploit-DB
CVSS 3.0
7.8
EPSS
20.3%
EPSS 1% CVSS 7.8
HIGH This Week

Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Memory Corruption Microsoft +2
NVD GitHub
EPSS 2% CVSS 5.5
MEDIUM POC This Month

Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Microsoft Polaris Office +1
NVD GitHub
EPSS 1% CVSS 8.8
HIGH This Week

An issue was discovered in ML Report Program. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Polaris Ml Report +1
NVD
EPSS 20% CVSS 7.8
HIGH POC THREAT This Week

Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Microsoft Polaris Office 2017 +1
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy