Office Compatibility Pack vulnerabilities | LiveThreat CVE Feed

Product

Office Compatibility Pack

by Microsoft · last CVE Mar 5, 2019

On CISA KEVExploited in the wildRansomware-linked

206

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities206 In the news1 Timeline

Severity mix

Critical 0High 90Medium 15Low 0

Severity

All severities206 Critical0 High90 Medium15 Low0

Exploitation

On CISA KEV13 Exploited in the wild13

Watch

Add Office Compatibility Pack to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-11877	5.5	5%	Nov 15	Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016,… Affected: All versions, or not specified
CVE-2017-0194	5.5	26%	Apr 12	Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memory via a crafted… Affected: All versions, or not specified
CVE-2017-0105	5.5	30%	Mar 17	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: All versions, or not specified
CVE-2016-3234	5.5	26%	Jun 16	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation… Affected: All versions, or not specified
CVE-2017-0027	4.7	23%	Mar 17	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to… Affected: All versions, or not specified
CVE-2015-6177	–	14%	Dec 9	Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office… Affected: All versions, or not specified
CVE-2015-6172	–	54%	Dec 9	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary… Affected: All versions, or not specified
CVE-2015-6124	–	14%	Dec 9	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a… Affected: All versions, or not specified
CVE-2015-6122	–	14%	Dec 9	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office… Affected: All versions, or not specified
CVE-2015-6040	–	14%	Dec 9	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code… Affected: All versions, or not specified
CVE-2015-6092	–	15%	Nov 11	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to… Affected: All versions, or not specified
CVE-2015-6038	–	36%	Nov 11	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and… Affected: All versions, or not specified
CVE-2015-2558	–	23%	Oct 14	Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Excel Viewer,… Affected: All versions, or not specified
CVE-2015-2523	–	30%	Sep 9	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to… Affected: All versions, or not specified
CVE-2015-2521	–	28%	Sep 9	Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka… Affected: All versions, or not specified
CVE-2015-2520	–	28%	Sep 9	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a… Affected: All versions, or not specified
CVE-2015-2468	–	43%	Aug 15	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer,… Affected: All versions, or not specified
CVE-2015-2415	–	14%	Jul 14	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial… Affected: All versions, or not specified
CVE-2015-2378	–	6%	Jul 14	Untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3, and Office Compatibility Pack SP3 allows local users to gain privileges via… Affected: All versions, or not specified
CVE-2015-2377	–	14%	Jul 14	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial… Affected: All versions, or not specified
CVE-2015-2376	–	16%	Jul 14	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibility Pack SP3, Excel Services on… Affected: All versions, or not specified
CVE-2015-1760	–	16%	Jun 10	Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document,… Affected: All versions, or not specified
CVE-2015-1759	–	16%	Jun 10	Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Affected: All versions, or not specified
CVE-2015-1651	–	16%	Apr 14	Use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office… Affected: All versions, or not specified
CVE-2015-1650	–	29%	Apr 14	Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compatibility Pack SP3, Word… Affected: All versions, or not specified
CVE-2015-1649	–	26%	Apr 14	Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server… Affected: All versions, or not specified
CVE-2015-0086	–	15%	Mar 11	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on… Affected: All versions, or not specified
CVE-2015-0085	–	19%	Mar 11	Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2,… Affected: All versions, or not specified
CVE-2015-0064	–	30%	Feb 11	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack… Affected: All versions, or not specified
CVE-2015-0063	–	16%	Feb 11	Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compatibility Pack SP3 allow remote… Affected: All versions, or not specified
CVE-2014-6361	–	13%	Dec 11	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a… Affected: All versions, or not specified
CVE-2014-6360	–	13%	Dec 11	Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Global Free Remote… Affected: All versions, or not specified
CVE-2014-6357	–	19%	Dec 11	Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3,… Affected: All versions, or not specified
CVE-2014-6356	–	12%	Dec 11	Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka… Affected: All versions, or not specified
CVE-2014-6335	–	16%	Nov 11	Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: All versions, or not specified
CVE-2014-6334	–	17%	Nov 11	Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: All versions, or not specified
CVE-2014-6333	–	18%	Nov 11	Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office… Affected: All versions, or not specified
CVE-2014-4117	–	17%	Oct 15	Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on… Affected: All versions, or not specified
CVE-2014-2778	–	20%	Jun 11	Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted embedded… Affected: All versions, or not specified
CVE-2014-1757	–	17%	Apr 8	Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a binary (aka .doc) format to a newer… Affected: All versions, or not specified
CVE-2014-0260	–	18%	Jan 15	Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps… Affected: All versions, or not specified
CVE-2014-0259	–	16%	Jan 15	Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office… Affected: All versions, or not specified
CVE-2014-0258	–	16%	Jan 15	Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: All versions, or not specified
CVE-2013-3890	–	20%	Oct 9	Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel… Affected: All versions, or not specified
CVE-2013-3889	–	27%	Oct 9	Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack… Affected: All versions, or not specified
CVE-2013-3858	–	21%	Sep 11	Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility… Affected: All versions, or not specified
CVE-2013-3857	–	21%	Sep 11	Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1 and… Affected: All versions, or not specified
CVE-2013-3855	–	20%	Sep 11	Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: All versions, or not specified
CVE-2013-3852	–	20%	Sep 11	Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service… Affected: All versions, or not specified
CVE-2013-3851	–	20%	Sep 11	Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a… Affected: All versions, or not specified