O3
Product
Office 365 ProPlus
On CISA KEVExploited in the wild
84
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 62Medium 20Low 0
Watch
Add Office 365 ProPlus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1297 In wildKEV | 8.8 | Sep 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 32-bit Systems; 64-bit Systems |
| CVE-2019-0541 In wildKEV | 8.8 | Jan 8 | Microsoft MSHTML Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2019-1449 | 9.8 | Nov 12 | A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any… Affected: All versions, or not specified |
| CVE-2019-1205 | 9.8 | Aug 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: All versions, or not specified |
| CVE-2020-0979 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-0906 | 8.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-0760 | 8.8 | Apr 15 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0850 | 8.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-0759 | 8.8 | Feb 11 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-1331 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-1327 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-1111 | 8.8 | Jul 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-1110 | 8.8 | Jul 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-0585 | 8.8 | Jan 8 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-8582 | 8.8 | Nov 14 | A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-8504 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code… Affected: All versions, or not specified |
| CVE-2018-8502 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code… Affected: All versions, or not specified |
| CVE-2018-8501 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint… Affected: All versions, or not specified |
| CVE-2020-0991 | 7.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-0980 | 7.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-0961 | 7.8 | Apr 15 | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity… Affected: All versions, or not specified |
| CVE-2020-0892 | 7.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-0855 | 7.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-0851 | 7.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-0697 | 7.8 | Feb 11 | An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this task as… Affected: All versions, or not specified |
| CVE-2020-0653 | 7.8 | Jan 14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-0652 | 7.8 | Jan 14 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Memory Corruption… Affected: All versions, or not specified |
| CVE-2020-0651 | 7.8 | Jan 14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2020-0650 | 7.8 | Jan 14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-1462 | 7.8 | Dec 10 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code… Affected: All versions, or not specified |
| CVE-2019-1448 | 7.8 | Nov 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-1264 | 7.8 | Sep 11 | A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass Vulnerability' Affected: All versions, or not specified |
| CVE-2019-1246 | 7.8 | Sep 11 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-1201 | 7.8 | Aug 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: All versions, or not specified |
| CVE-2019-1200 | 7.8 | Aug 14 | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory Affected: All versions, or not specified |
| CVE-2019-1199 | 7.8 | Aug 14 | A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory Affected: All versions, or not specified |
| CVE-2019-1155 | 7.8 | Aug 14 | A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory Affected: All versions, or not specified |
| CVE-2019-1035 | 7.8 | Jun 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: All versions, or not specified |
| CVE-2019-1034 | 7.8 | Jun 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: All versions, or not specified |
| CVE-2019-0953 | 7.8 | May 16 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-0946 | 7.8 | May 16 | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity… Affected: All versions, or not specified |
| CVE-2019-0828 | 7.8 | Apr 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-0827 | 7.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity… Affected: All versions, or not specified |
| CVE-2019-0826 | 7.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity… Affected: All versions, or not specified |
| CVE-2019-0825 | 7.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity… Affected: All versions, or not specified |
| CVE-2019-0824 | 7.8 | Apr 9 | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity… Affected: All versions, or not specified |
| CVE-2019-0822 | 7.8 | Apr 9 | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution… Affected: All versions, or not specified |
| CVE-2019-0801 | 7.8 | Apr 9 | A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user… Affected: All versions, or not specified |
| CVE-2019-0674 | 7.8 | Mar 5 | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity… Affected: 32-bit Systems; 64-bit Systems |
| CVE-2019-0673 | 7.8 | Mar 5 | A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity… Affected: 32-bit Systems; 64-bit Systems |