Office Web Apps vulnerabilities

3 known vulnerabilities in Office Web Apps from Microsoft. 3 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Office Memory Corruption Exploited

  CVE-2015-1641Apr 14, 2015MicrosoftEPSS 97.2%

  Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 al

• 9.3 High severity

  Microsoft Word Memory Corruption Exploited

  CVE-2014-1761Mar 25, 2014MicrosoftEPSS 77.7%

  Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web A

• 9.3 High severity

  Microsoft Word Remote Code Execution Exploited

  CVE-2012-2539Dec 12, 2012MicrosoftEPSS 53%

  Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, ak