Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Office
Total 843 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-49027 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2024-11-16 N/A 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-49026 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2024-11-16 N/A 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-49030 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2024-11-16 N/A 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-49029 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2024-11-16 N/A 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-49033 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2024-11-16 N/A 7.5 HIGH
Microsoft Word Security Feature Bypass Vulnerability
CVE-2022-21841 1 Microsoft 2 365 Apps, Office 2024-11-14 9.3 HIGH 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-21840 1 Microsoft 6 Excel, Office, Office Online Server and 3 more 2024-11-14 6.8 MEDIUM 8.8 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-43504 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2024-10-21 N/A 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-43616 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2024-10-21 N/A 7.8 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVE-2009-2502 1 Microsoft 27 .net Framework, Excel Viewer, Expression Web and 24 more 2024-10-21 9.3 HIGH 8.1 HIGH
Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office Excel Viewer, Office PowerPoint Viewer 2007 Gold, SP1, and SP2, Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2, Expression Web, Expression Web 2, Groove 2007 Gold and SP1, Works 8.5, SQL Server 2000 Reporting Services SP2, SQL Server 2005 SP2 and SP3, Report Viewer 2005 SP1, Report Viewer 2008 Gold and SP1, and Forefront Client Security 1.0 allows remote attackers to execute arbitrary code via a crafted TIFF image file, aka "GDI+ TIFF Buffer Overflow Vulnerability."
CVE-2024-43609 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2024-10-17 N/A 6.5 MEDIUM
Microsoft Office Spoofing Vulnerability
CVE-2024-43505 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2024-10-17 N/A 7.8 HIGH
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2024-21413 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2024-10-09 N/A 9.8 CRITICAL
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2021-1716 1 Microsoft 8 365 Apps, Office, Office Online Server and 5 more 2024-10-08 9.3 HIGH 7.8 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-1715 1 Microsoft 8 365 Apps, Office, Office Online Server and 5 more 2024-10-08 9.3 HIGH 7.8 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-1714 1 Microsoft 7 365 Apps, Excel, Excel Services and 4 more 2024-10-08 6.8 MEDIUM 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-1713 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2024-10-08 6.8 MEDIUM 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-1711 1 Microsoft 2 365 Apps, Office 2024-10-08 9.3 HIGH 7.8 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-20677 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2024-10-08 N/A 7.8 HIGH
A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feature enabled will no longer have access to it. This includes Office 2019, Office 2021, Office LTSC for Mac 2021, and Microsoft 365. As of February 13, 2024, the ability to insert FBX files has also been disabled in 3D Viewer. 3D models in Office documents that were previously inserted from a FBX file will continue to work as expected unless the Link to File option was chosen at insert time. This change is effective as of the January 9, 2024 security update.
CVE-2024-38016 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2024-09-24 N/A 7.8 HIGH
Microsoft Office Visio Remote Code Execution Vulnerability