Office Web Apps Server vulnerabilities | LiveThreat CVE Feed

Product

Office Web Apps Server

by Microsoft · last CVE Mar 14, 2023

On CISA KEVExploited in the wild

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities62 In the news0 Timeline

Severity mix

Critical 0High 42Medium 12Low 1

Severity

All severities62 Critical0 High42 Medium12 Low1

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Office Web Apps Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-11826 In wildKEV	7.8	81%	Oct 13	Microsoft Office Remote Code Execution Vulnerability Affected: 2010; 2013
CVE-2014-1761 In wildKEV	7.8	78%	Mar 24	Microsoft Word Memory Corruption Vulnerability Affected: 2013
CVE-2022-41106	8.8	2%	Nov 9	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2019-0585	8.8	22%	Jan 8	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution… Affected: 2010
CVE-2017-8509	8.8	18%	Jun 15	A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2013
CVE-2017-8512	8.8	22%	Jun 15	A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2013
CVE-2023-23399	7.8	3%	Mar 14	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2022-41063	7.8	1%	Nov 9	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2022-41061	7.8	1%	Nov 9	Microsoft Word Remote Code Execution Vulnerability Affected: 2013
CVE-2022-30173	7.8	2%	Jun 15	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2022-29110	7.8	4%	May 10	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2022-26901	7.8	3%	Apr 15	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2021-40442	7.8	2%	Nov 10	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2021-40486	7.8	6%	Oct 13	Microsoft Word Remote Code Execution Vulnerability Affected: 2013
CVE-2021-40474	7.8	2%	Oct 13	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2021-34518	7.8	2%	Jul 14	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2021-31939	7.8	13%	Jun 8	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2021-31179	7.8	13%	May 11	Microsoft Office Remote Code Execution Vulnerability Affected: 2013
CVE-2021-31177	7.8	3%	May 11	Microsoft Office Remote Code Execution Vulnerability Affected: 2013
CVE-2021-31176	7.8	3%	May 11	Microsoft Office Remote Code Execution Vulnerability Affected: 2013
CVE-2021-31175	7.8	3%	May 11	Microsoft Office Remote Code Execution Vulnerability Affected: 2013
CVE-2021-28454	7.8	3%	Apr 13	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2021-28453	7.8	4%	Apr 13	Microsoft Word Remote Code Execution Vulnerability Affected: 2013
CVE-2021-28451	7.8	2%	Apr 13	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2021-1716	7.8	4%	Jan 12	Microsoft Word Remote Code Execution Vulnerability Affected: 2013
CVE-2021-1715	7.8	4%	Jan 12	Microsoft Word Remote Code Execution Vulnerability Affected: 2013
CVE-2021-1714	7.8	3%	Jan 12	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2021-1713	7.8	3%	Jan 12	Microsoft Excel Remote Code Execution Vulnerability Affected: 2013
CVE-2019-1201	7.8	5%	Aug 14	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2013
CVE-2018-8577	7.8	19%	Nov 14	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution… Affected: 2013
CVE-2018-0797	7.8	25%	Jan 10	Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word… Affected: 2013
CVE-2017-8742	7.8	22%	Sep 13	A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1,… Affected: 2013
CVE-2017-8511	7.8	21%	Jun 15	A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2013
CVE-2016-3360	7.8	17%	Sep 14	Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer,… Affected: 2013
CVE-2016-3357	7.8	55%	Sep 14	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on… Affected: 2013
CVE-2016-3282	7.8	26%	Jul 13	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: 2013
CVE-2016-0127	7.8	21%	Apr 12	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server… Affected: 2010; 2013
CVE-2016-0134	7.8	22%	Mar 9	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: 2010; 2013
CVE-2016-0053	7.8	19%	Feb 10	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on… Affected: 2013
CVE-2016-0052	7.8	19%	Feb 10	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: 2013
CVE-2016-0022	7.8	19%	Feb 10	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: 2013
CVE-2016-0025	7.3	17%	Jun 16	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack… Affected: 2013
CVE-2023-23396	6.5	4%	Mar 14	Microsoft Excel Denial of Service Vulnerability Affected: 2013
CVE-2022-41103	5.5	1%	Nov 9	Microsoft Word Information Disclosure Vulnerability Affected: 2013
CVE-2022-41060	5.5	1%	Nov 9	Microsoft Word Information Disclosure Vulnerability Affected: 2013
CVE-2022-30172	5.5	3%	Jun 15	Microsoft Office Information Disclosure Vulnerability Affected: 2013
CVE-2022-30171	5.5	3%	Jun 15	Microsoft Office Information Disclosure Vulnerability Affected: 2013
CVE-2022-30159	5.5	3%	Jun 15	Microsoft Office Information Disclosure Vulnerability Affected: 2013
CVE-2021-40472	5.5	1%	Oct 13	Microsoft Excel Information Disclosure Vulnerability Affected: 2013
CVE-2021-31178	5.5	16%	May 11	Microsoft Office Information Disclosure Vulnerability Affected: 2013