Office Web Apps vulnerabilities | LiveThreat CVE Feed

Product

Office Web Apps

by Microsoft · last CVE Feb 14, 2023

On CISA KEVExploited in the wild

106

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities106 In the news0 Timeline

Severity mix

Critical 1High 67Medium 14Low 1

Severity

All severities106 Critical1 High67 Medium14 Low1

Exploitation

On CISA KEV3 Exploited in the wild3

Watch

Add Office Web Apps to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2016-7233	6.5	22%	Nov 10	Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint… Affected: 2010
CVE-2020-1442	6.1	2%	Jul 14	A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability' Affected: 2013
CVE-2022-22716	5.5	5%	Feb 9	Microsoft Excel Information Disclosure Vulnerability Affected: 2013
CVE-2020-17126	5.5	1%	Dec 10	Microsoft Excel Information Disclosure Vulnerability Affected: 2013
CVE-2020-1224	5.5	4%	Sep 11	<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory Affected: 2013
CVE-2020-1503	5.5	5%	Aug 17	An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory Affected: 2010; 2013
CVE-2020-1445	5.5	6%	Jul 14	An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability' Affected: 2010; 2013
CVE-2020-1342	5.5	6%	Jul 14	An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: 2010; 2013
CVE-2018-8378	5.5	7%	Aug 15	An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: 2010; 2013
CVE-2017-0105	5.5	30%	Mar 17	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: 2010
CVE-2016-3279	5.5	16%	Jul 13	Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word… Affected: 2010
CVE-2016-3234	5.5	26%	Jun 16	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation… Affected: 2010; 2013
CVE-2018-8247	5.4	3%	Jun 14	An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of… Affected: 2013
CVE-2017-0195	5.4	4%	Apr 12	Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server… Affected: 2010