Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Office
Total 960 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-0008 1 Microsoft 3 Office, Windows 2003 Server, Windows Xp 2025-04-03 7.2 HIGH N/A
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
CVE-2006-0031 1 Microsoft 1 Office 2025-04-03 5.1 MEDIUM N/A
Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted attackers to execute arbitrary code via an Excel file with a malformed record with a modified length value, which leads to memory corruption.
CVE-2002-0617 1 Microsoft 2 Excel, Office 2025-04-03 5.1 MEDIUM N/A
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."
CVE-2018-0798 1 Microsoft 3 Office, Office Compatibility Pack, Word 2025-03-26 9.3 HIGH 8.8 HIGH
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".
CVE-2018-0802 1 Microsoft 3 Office, Office Compatibility Pack, Word 2025-03-26 9.3 HIGH 7.8 HIGH
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.
CVE-2023-23397 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-03-13 N/A 9.8 CRITICAL
Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2021-42292 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2025-03-07 6.8 MEDIUM 7.8 HIGH
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2021-38646 1 Microsoft 2 365 Apps, Office 2025-03-07 6.8 MEDIUM 7.8 HIGH
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVE-2021-27059 1 Microsoft 1 Office 2025-03-07 8.5 HIGH 7.6 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-36765 1 Microsoft 1 Office 2025-02-28 N/A 7.8 HIGH
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-36569 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-02-28 N/A 8.4 HIGH
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-33150 1 Microsoft 3 365 Apps, Office, Word 2025-02-28 N/A 9.6 CRITICAL
Microsoft Office Security Feature Bypass Vulnerability
CVE-2023-33148 1 Microsoft 2 365 Apps, Office 2025-02-28 N/A 7.8 HIGH
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-33131 1 Microsoft 4 Office, Office Long Term Servicing Channel, Outlook and 1 more 2025-02-28 N/A 8.8 HIGH
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-23398 1 Microsoft 3 365 Apps, Excel, Office 2025-02-28 N/A 7.1 HIGH
Microsoft Excel Spoofing Vulnerability
CVE-2022-41061 1 Microsoft 7 365 Apps, Office, Office Online Server and 4 more 2025-02-28 N/A 7.8 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-40485 1 Microsoft 6 365 Apps, Excel, Office and 3 more 2025-02-28 6.8 MEDIUM 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-31949 1 Microsoft 3 365 Apps, Office, Outlook 2025-02-28 6.8 MEDIUM 7.3 HIGH
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-29333 1 Microsoft 2 365 Apps, Office 2025-02-28 N/A 3.3 LOW
Microsoft Access Denial of Service Vulnerability
CVE-2023-35311 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-02-24 N/A 8.8 HIGH
Microsoft Outlook Security Feature Bypass Vulnerability