Microsoft Office vulnerabilities

6 known vulnerabilities in Microsoft Office from Microsoft. 6 are rated high or critical, and 6 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Microsoft Excel Remote Code Execution Exploited

  CVE-2019-1297Sep 11, 2019MicrosoftEPSS 21.8%

  A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

• 8.8 High severity

  Microsoft MSHTML Remote Code Execution Exploited

  CVE-2019-0541Jan 8, 2019MicrosoftEPSS 53.2%

  A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explo

• 7.8 High severity

  Microsoft Office Memory Corruption Exploited

  CVE-2017-11882Nov 15, 2017MicrosoftEPSS 99.9%

  Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memo

• 7.8 High severity

  Microsoft Office Remote Code Execution Exploited

  CVE-2017-11826Oct 13, 2017MicrosoftEPSS 82.2%

  Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code executio

• 7.8 High severity

  Microsoft Office Remote Code Execution Exploited

  CVE-2017-0262May 12, 2017MicrosoftEPSS 81%

  Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and

• 7.8 High severity

  Microsoft Office Use-After-Free Exploited

  CVE-2017-0261May 12, 2017MicrosoftEPSS 78.1%

  Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0262 and