O3
Product
Office 365 ProPlus
On CISA KEVExploited in the wild
84
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 62Medium 20Low 0
Watch
Add Office 365 ProPlus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-0696 | 6.5 | Feb 11 | A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass… Affected: All versions, or not specified |
| CVE-2019-1461 | 6.5 | Dec 10 | A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service… Affected: All versions, or not specified |
| CVE-2019-1084 | 6.5 | Jul 15 | An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters Affected: All versions, or not specified |
| CVE-2019-0669 | 6.5 | Mar 5 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability' Affected: 32-bit Systems; 64-bit Systems |
| CVE-2019-0559 | 6.5 | Jan 8 | An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosure Vulnerability."… Affected: All versions, or not specified |
| CVE-2018-8579 | 6.5 | Nov 14 | An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365… Affected: All versions, or not specified |
| CVE-2018-8558 | 6.5 | Nov 14 | An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center, aka… Affected: All versions, or not specified |
| CVE-2018-8546 | 5.9 | Nov 14 | A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft… Affected: All versions, or not specified |
| CVE-2019-1464 | 5.5 | Dec 10 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability' Affected: All versions, or not specified |
| CVE-2019-1463 | 5.5 | Dec 10 | An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information… Affected: All versions, or not specified |
| CVE-2019-1400 | 5.5 | Dec 10 | An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information… Affected: All versions, or not specified |
| CVE-2019-1263 | 5.5 | Sep 11 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability' Affected: All versions, or not specified |
| CVE-2019-1112 | 5.5 | Jul 15 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0540 | 5.5 | Mar 5 | A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim… Affected: 32-bit Systems; 64-bit Systems |
| CVE-2019-0561 | 5.5 | Jan 8 | An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects… Affected: All versions, or not specified |
| CVE-2019-0560 | 5.5 | Jan 8 | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability."… Affected: All versions, or not specified |
| CVE-2018-8627 | 5.5 | Dec 12 | An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: All versions, or not specified |
| CVE-2018-8427 | 5.5 | Oct 10 | An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure… Affected: All versions, or not specified |
| CVE-2018-8598 | 4.7 | Dec 12 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: All versions, or not specified |
| CVE-2019-1204 | 4.3 | Aug 14 | An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages Affected: All versions, or not specified |
Showing 20
