OC
Product
Office Compatibility Pack
On CISA KEVExploited in the wildRansomware-linked
206
CVEs
13
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 90Medium 15Low 0
Watch
Add Office Compatibility Pack to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-0798 In wildKEV | 8.8 | Jan 10 | Microsoft Office Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2015-2424 In wildKEV | 8.8 | Jul 14 | Microsoft PowerPoint Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2009-0238 In wildKEV | 8.8 | Feb 25 | Microsoft Office Remote Code Execution Affected: 2007 |
| CVE-2018-0802 RansomwareIn wildKEV | 7.8 | Jan 10 | Microsoft Office Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2017-11826 In wildKEV | 7.8 | Oct 13 | Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2016-7262 In wildKEV | 7.8 | Dec 20 | Microsoft Office Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2016-7193 In wildKEV | 7.8 | Oct 14 | Microsoft Office Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2015-1641 In wildKEV | 7.8 | Apr 14 | Microsoft Office Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2014-1761 In wildKEV | 7.8 | Mar 24 | Microsoft Word Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2013-3906 In wildKEV | 7.8 | Nov 6 | Microsoft Graphics Component Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2012-2539 In wildKEV | 7.8 | Dec 12 | Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2009-0557 In wildKEV | 7.8 | Jun 10 | Microsoft Office Object Record Corruption Vulnerability Affected: 2007; 2007 |
| CVE-2009-0563 In wildKEV | 7.8 | Jun 10 | Microsoft Office Buffer Overflow Vulnerability Affected: 2007; 2007 |
| CVE-2018-0862 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: All versions, or not specified |
| CVE-2018-0849 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: All versions, or not specified |
| CVE-2018-0848 | 8.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: All versions, or not specified |
| CVE-2018-0807 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: All versions, or not specified |
| CVE-2018-0806 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: All versions, or not specified |
| CVE-2018-0805 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: All versions, or not specified |
| CVE-2018-0804 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: All versions, or not specified |
| CVE-2018-0801 | 8.8 | Jan 10 | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way… Affected: All versions, or not specified |
| CVE-2018-0796 | 8.8 | Jan 10 | Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way… Affected: All versions, or not specified |
| CVE-2018-0794 | 8.8 | Jan 10 | Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way… Affected: All versions, or not specified |
| CVE-2017-11854 | 8.8 | Nov 15 | Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 allow an… Affected: All versions, or not specified |
| CVE-2017-8509 | 8.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: All versions, or not specified |
| CVE-2013-0006 | 8.8 | Jan 9 | Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka… Affected: All versions, or not specified |
| CVE-2009-2502 | 8.1 | Oct 14 | Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002… Affected: 2007; 2007 |
| CVE-2018-8628 | 7.8 | Dec 12 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code… Affected: All versions, or not specified |
| CVE-2018-8597 | 7.8 | Dec 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-8577 | 7.8 | Nov 14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-8432 | 7.8 | Oct 10 | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-8375 | 7.8 | Aug 15 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-8281 | 7.8 | Jul 11 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-8148 | 7.8 | May 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-8147 | 7.8 | May 9 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1029 | 7.8 | Apr 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-1027 | 7.8 | Apr 12 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: All versions, or not specified |
| CVE-2018-0922 | 7.8 | Mar 14 | Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps… Affected: All versions, or not specified |
| CVE-2018-0845 | 7.8 | Jan 22 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: All versions, or not specified |
| CVE-2018-0812 | 7.8 | Jan 10 | Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution… Affected: All versions, or not specified |
| CVE-2018-0797 | 7.8 | Jan 10 | Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word… Affected: All versions, or not specified |
| CVE-2018-0793 | 7.8 | Jan 10 | Microsoft Outlook 2007, Microsoft Outlook 2010 and Microsoft Outlook 2013 allow a remote code execution vulnerability due to the way email messages are parsed, aka "Microsoft… Affected: All versions, or not specified |
| CVE-2017-11878 | 7.8 | Nov 15 | Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016,… Affected: All versions, or not specified |
| CVE-2017-8742 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1,… Affected: All versions, or not specified |
| CVE-2017-8632 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel… Affected: All versions, or not specified |
| CVE-2017-8631 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1,… Affected: All versions, or not specified |
| CVE-2017-8501 | 7.8 | Jul 11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability" Affected: All versions, or not specified |
| CVE-2017-0254 | 7.8 | May 12 | Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps… Affected: All versions, or not specified |
| CVE-2017-0053 | 7.8 | Mar 17 | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer allow remote attackers to… Affected: All versions, or not specified |
| CVE-2017-0052 | 7.8 | Mar 17 | Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a… Affected: All versions, or not specified |
