Office Compatibility Pack vulnerabilities | LiveThreat CVE Feed

Product

Office Compatibility Pack

by Microsoft · last CVE Mar 5, 2019

On CISA KEVExploited in the wildRansomware-linked

206

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities206 In the news1 Timeline

Severity mix

Critical 0High 90Medium 15Low 0

Severity

All severities206 Critical0 High90 Medium15 Low0

Exploitation

On CISA KEV13 Exploited in the wild13

Watch

Add Office Compatibility Pack to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-0669	6.5	6%	Mar 5	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability' Affected: All versions, or not specified
CVE-2018-8160	6.5	8%	May 9	An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Word, Microsoft… Affected: All versions, or not specified
CVE-2018-0950	6.5	9%	Apr 12	An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka… Affected: All versions, or not specified
CVE-2016-7233	6.5	22%	Nov 10	Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint… Affected: All versions, or not specified
CVE-2018-8627	5.5	9%	Dec 12	An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: All versions, or not specified
CVE-2018-8427	5.5	2%	Oct 10	An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure… Affected: All versions, or not specified
CVE-2018-8429	5.5	12%	Sep 13	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: All versions, or not specified
CVE-2018-8382	5.5	13%	Aug 15	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: All versions, or not specified
CVE-2018-8378	5.5	7%	Aug 15	An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: All versions, or not specified
CVE-2018-8246	5.5	19%	Jun 14	An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability."… Affected: All versions, or not specified
CVE-2017-11877	5.5	5%	Nov 15	Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016,… Affected: All versions, or not specified
CVE-2017-0194	5.5	26%	Apr 12	Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memory via a crafted… Affected: All versions, or not specified
CVE-2017-0105	5.5	30%	Mar 17	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: All versions, or not specified
CVE-2016-3234	5.5	26%	Jun 16	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation… Affected: All versions, or not specified
CVE-2017-0027	4.7	23%	Mar 17	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to… Affected: All versions, or not specified