O3
Product
Office 365 ProPlus
by Microsoft · last CVE Apr 15, 2020
On CISA KEVExploited in the wild
84
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 62Medium 20Low 0
Watch

Add Office 365 ProPlus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-0696
6.5
5%
Feb 11
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass…
Affected: All versions, or not specified
CVE-2019-1461
6.5
5%
Dec 10
A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service…
Affected: All versions, or not specified
CVE-2019-1084
6.5
5%
Jul 15
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters
Affected: All versions, or not specified
CVE-2019-0669
6.5
6%
Mar 5
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'
Affected: 32-bit Systems; 64-bit Systems
CVE-2019-0559
6.5
7%
Jan 8
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosure Vulnerability."…
Affected: All versions, or not specified
CVE-2018-8579
6.5
6%
Nov 14
An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365…
Affected: All versions, or not specified
CVE-2018-8558
6.5
6%
Nov 14
An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center, aka…
Affected: All versions, or not specified
CVE-2018-8546
5.9
5%
Nov 14
A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft…
Affected: All versions, or not specified
CVE-2019-1464
5.5
9%
Dec 10
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'
Affected: All versions, or not specified
CVE-2019-1463
5.5
2%
Dec 10
An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information…
Affected: All versions, or not specified
CVE-2019-1400
5.5
2%
Dec 10
An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information…
Affected: All versions, or not specified
CVE-2019-1263
5.5
8%
Sep 11
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'
Affected: All versions, or not specified
CVE-2019-1112
5.5
9%
Jul 15
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'
Affected: All versions, or not specified
CVE-2019-0540
5.5
13%
Mar 5
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim…
Affected: 32-bit Systems; 64-bit Systems
CVE-2019-0561
5.5
8%
Jan 8
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects…
Affected: All versions, or not specified
CVE-2019-0560
5.5
9%
Jan 8
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability."…
Affected: All versions, or not specified
CVE-2018-8627
5.5
9%
Dec 12
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of…
Affected: All versions, or not specified
CVE-2018-8427
5.5
2%
Oct 10
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure…
Affected: All versions, or not specified
CVE-2018-8598
4.7
6%
Dec 12
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."…
Affected: All versions, or not specified
CVE-2019-1204
4.3
4%
Aug 14
An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages
Affected: All versions, or not specified
Showing 20