OW
Product
Office Web Apps
On CISA KEVExploited in the wild
106
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 67Medium 14Low 1
Watch
Add Office Web Apps to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-1641 In wildKEV | 7.8 | Apr 14 | Microsoft Office Memory Corruption Vulnerability Affected: 2010; 2013 |
| CVE-2014-1761 In wildKEV | 7.8 | Mar 24 | Microsoft Word Memory Corruption Vulnerability Affected: 2010; 2010 |
| CVE-2012-2539 In wildKEV | 7.8 | Dec 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2022-21840 | 8.8 | Jan 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2020-1583 | 8.8 | Aug 17 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory Affected: 2010; 2013 |
| CVE-2020-1448 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2013 |
| CVE-2020-1447 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010; 2013 |
| CVE-2020-1446 | 8.8 | Jul 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010; 2013 |
| CVE-2018-8504 | 8.8 | Oct 10 | A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code… Affected: 2010 |
| CVE-2018-1028 | 8.8 | Apr 12 | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code… Affected: 2010; 2013 |
| CVE-2017-8509 | 8.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2010 |
| CVE-2017-8512 | 8.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2010 |
| CVE-2016-0183 | 8.8 | May 11 | The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remote attackers… Affected: 2010 |
| CVE-2021-43256 | 7.8 | Dec 15 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2021-38655 | 7.8 | Sep 15 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2021-28453 | 7.8 | Apr 13 | Microsoft Word Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2021-27057 | 7.8 | Mar 11 | Microsoft Office Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2021-27054 | 7.8 | Mar 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2021-27053 | 7.8 | Mar 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2021-24070 | 7.8 | Feb 25 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2021-24069 | 7.8 | Feb 25 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2021-24068 | 7.8 | Feb 25 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2021-24067 | 7.8 | Feb 25 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2021-1716 | 7.8 | Jan 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2021-1715 | 7.8 | Jan 12 | Microsoft Word Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2020-17129 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2020-17128 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2020-17125 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2020-17123 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2020-17122 | 7.8 | Dec 10 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2020-17065 | 7.8 | Nov 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2020-17064 | 7.8 | Nov 11 | Microsoft Excel Remote Code Execution Vulnerability Affected: 2013 |
| CVE-2020-16932 | 7.8 | Oct 16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2013 |
| CVE-2020-16931 | 7.8 | Oct 16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2013 |
| CVE-2020-16929 | 7.8 | Oct 16 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2010; 2013 |
| CVE-2020-1335 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory Affected: 2013 |
| CVE-2020-1218 | 7.8 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2010; 2013 |
| CVE-2020-0980 | 7.8 | Apr 15 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010; 2013 |
| CVE-2020-0892 | 7.8 | Mar 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution… Affected: 2010 |
| CVE-2019-1201 | 7.8 | Aug 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2010 |
| CVE-2019-1034 | 7.8 | Jun 12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory Affected: 2010 |
| CVE-2018-8628 | 7.8 | Dec 12 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code… Affected: 2010; 2013 |
| CVE-2018-8539 | 7.8 | Nov 14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution… Affected: 2010 |
| CVE-2018-8161 | 7.8 | May 9 | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution… Affected: 2010; 2013 |
| CVE-2018-0922 | 7.8 | Mar 14 | Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps… Affected: 2010; 2013 |
| CVE-2018-0797 | 7.8 | Jan 10 | Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word… Affected: 2010; 2010 |
| CVE-2017-8742 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1,… Affected: 2010 |
| CVE-2017-8632 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel… Affected: 2013 |
| CVE-2017-8631 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1,… Affected: 2013 |
| CVE-2017-8511 | 7.8 | Jun 15 | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: 2010 |
