Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.8Microsoft Outlook Improper Input Validation VulnerabilityVuln · CVE-2024-21413 · Microsoft · Office Outlook · CERT-FR · CISA KEV · CVE.org · Microsoft, Microsoft 365Patch nowKEVEPSS 94.66%Feb 13, 2024
Medium6.5Microsoft Word Information Disclosure VulnerabilityVuln · CVE-2023-36761 · Microsoft · Word · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 19.57%Sep 12, 2023
High8.8Microsoft Outlook Security Feature Bypass VulnerabilityVuln · CVE-2023-35311 · Microsoft · Outlook · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 15.52%Jul 11, 2023
Critical9.8Microsoft Office Outlook Privilege Escalation VulnerabilityVuln · CVE-2023-23397 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 97.16%Mar 14, 2023
High7.3Microsoft Office Publisher Security Feature Bypass VulnerabilityVuln · CVE-2023-21715 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 12.01%Feb 14, 2023
High7.8Microsoft Excel Security Feature BypassVuln · CVE-2021-42292 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 43.00%Nov 9, 2021
High7.8Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityVuln · CVE-2021-38646 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 7.99%Sep 15, 2021
UnknownMicrosoft Office Improper Restriction of Operations within the Bounds of a Memory BufferVuln · CVE-2010-3336 · Microsoft · Office · CVE.org · FIRST EPSS · VulnCheck KEV · Microsoft, Microsoft 365Patch nowKEVEPSS 23.91%Aug 17, 2021
High7.6Microsoft Office Remote Code Execution VulnerabilityVuln · CVE-2021-27059 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 6.08%Mar 11, 2021
UnknownMicrosoft Excel Remote Code ExecutionVuln · CVE-2020-0653 · Microsoft · Office · CVE.org · FIRST EPSS · VulnCheck KEV · Microsoft, Microsoft 365Patch nowKEVEPSS 20.54%Jan 22, 2020
High8.8Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2…Vuln · CVE-2018-0851 · microsoft · office · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365Check this weekEPSS 19.11%Feb 15, 2018
High8.8Microsoft Office Memory Corruption VulnerabilityVuln · CVE-2018-0798 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 95.12%Jan 9, 2018
High7.8Microsoft Office Memory Corruption VulnerabilityVuln · CVE-2018-0802 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 93.29%Jan 9, 2018
High7.8Microsoft Office Memory Corruption VulnerabilityVuln · CVE-2017-11882 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 99.94%Nov 14, 2017
High7.8Microsoft Office Outlook Security Feature Bypass VulnerabilityVuln · CVE-2017-11774 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 59.63%Oct 13, 2017
High7.8Microsoft Office Remote Code Execution VulnerabilityVuln · CVE-2017-11826 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 81.33%Sep 28, 2017
High7.8Microsoft Office Remote Code Execution VulnerabilityVuln · CVE-2017-8570 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 89.89%Jul 11, 2017
High8.8A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".Vuln · CVE-2017-8512 · microsoft · office · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365Check this weekEPSS 22.13%Jun 15, 2017
High8.8A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".Vuln · CVE-2017-8509 · microsoft · office · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365Check this weekEPSS 18.24%Jun 15, 2017
High7.8Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server…Vuln · CVE-2017-0281 · microsoft · office · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365Check this weekEPSS 15.76%May 12, 2017
High7.8Microsoft Office Remote Code Execution VulnerabilityVuln · CVE-2017-0262 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 81.01%May 9, 2017
High7.8Microsoft Office Use-After-Free VulnerabilityVuln · CVE-2017-0261 · Microsoft · Office · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 78.13%May 9, 2017
High7.8Microsoft Office and WordPad Remote Code Execution VulnerabilityVuln · CVE-2017-0199 · Microsoft · Office and WordPad · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 99.50%Apr 11, 2017
High7.1Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from p…Vuln · CVE-2016-7276 · microsoft · office · CVE.org · FIRST EPSS · NIST NVD · Microsoft, Microsoft 365Check this weekEPSS 25.08%Dec 20, 2016
High7.8Microsoft Office Security Feature Bypass VulnerabilityVuln · CVE-2016-7262 · Microsoft · Excel · CISA KEV · CVE.org · FIRST EPSS · Microsoft, Microsoft 365Patch nowKEVEPSS 57.73%Dec 19, 2016