Office Word Viewer vulnerabilities

4 known vulnerabilities in Office Word Viewer from Microsoft. 4 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Microsoft MSHTML Remote Code Execution Exploited

  CVE-2019-0541Jan 8, 2019MicrosoftEPSS 53.2%

  A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explo

• 7.8 High severity

  Microsoft Office Remote Code Execution Exploited

  CVE-2017-11826Oct 13, 2017MicrosoftEPSS 82.2%

  Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code executio

• 9.3 High severity

  Microsoft Word Remote Code Execution Exploited

  CVE-2012-2539Dec 12, 2012MicrosoftEPSS 53%

  Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, ak

• 7.8 High severity

  Microsoft Office Buffer Overflow Exploited

  CVE-2009-0563Jun 10, 2009MicrosoftEPSS 59.6%

  Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Of