Office 2019 vulnerabilities
10 known vulnerabilities in Office 2019 from Microsoft. 10 are rated high or critical, and 6 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Microsoft 365 Apps for Enterprise: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.
- 8.8 High severity
Microsoft 365 Apps for Enterprise: Access of Resource Using Incompatible Type
Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- 7.8 High severity
Microsoft 365 Apps for Enterprise: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.
- 7.0 High severity
Microsoft 365 Apps for Enterprise: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- 7.3 High severity
Microsoft Publisher Protection Mechanism Failure Exploited
Microsoft Publisher Security Feature Bypass Vulnerability
- 8.8 High severity
Microsoft Project Remote Code Execution Exploited
Microsoft Project Remote Code Execution Vulnerability
- 9.8 Critical severity
Microsoft Outlook Improper Input Validation Exploited
Microsoft Outlook Remote Code Execution Vulnerability
- 7.5 High severity
Microsoft Outlook Security Feature Bypass Exploited
Microsoft Outlook Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Excel Security Feature Bypass Exploited
Microsoft Excel Security Feature Bypass Vulnerability
- 7.8 High severity
Microsoft Office Access Connectivity Engine Remote Code Execution Exploited
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability