PU
Product
Publisher
On CISA KEVExploited in the wild
45
CVEs
2
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 11Medium 1Low 0
Watch
Add Publisher to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-0671 In wildKEV | 8.8 | Feb 3 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 2000; 2002; 2003 |
| CVE-2024-38226 In wildKEV | 7.3 | Sep 10 | Microsoft Publisher Security Feature Bypass Vulnerability Affected: 2016; 2016 |
| CVE-2026-81385 | 8.8 | Sep 8 | Microsoft Office Publisher Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-69742 | 8.8 | Sep 8 | Microsoft Office Publisher Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2020-0760 | 8.8 | Apr 15 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability' Affected: 2010; 2013; 2016 |
| CVE-2024-20673 | 7.8 | Feb 13 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2023-28295 | 7.8 | Jun 17 | Microsoft Publisher Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2023-28287 | 7.8 | Jun 17 | Microsoft Publisher Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2018-8245 | 7.8 | Jun 14 | A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka… Affected: 2010 |
| CVE-2017-8725 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in… Affected: 2007; 2010 |
| CVE-2016-7289 | 7.8 | Dec 20 | Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office… Affected: 2010 |
| CVE-2022-29107 | 5.5 | May 10 | Microsoft Office Security Feature Bypass Vulnerability Affected: 2016; 2016 |
| CVE-2015-2503 | – | Nov 11 | Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office… Affected: 2007; 2010; 2013; 2016 |
| CVE-2014-1759 | – | Apr 8 | pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and… Affected: 2003; 2007 |
| CVE-2013-1329 | – | May 15 | Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka… Affected: 2003 |
| CVE-2013-1328 | – | May 15 | Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka… Affected: 2003; 2007; 2010 |
| CVE-2013-1327 | – | May 15 | Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory… Affected: 2003 |
| CVE-2013-1323 | – | May 15 | Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file,… Affected: 2003 |
| CVE-2013-1322 | – | May 15 | Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid… Affected: 2003 |
| CVE-2013-1321 | – | May 15 | Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher… Affected: 2003 |
| CVE-2013-1320 | – | May 15 | Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability." Affected: 2003 |
| CVE-2013-1319 | – | May 15 | Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher… Affected: 2003 |
| CVE-2013-1318 | – | May 15 | Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka "Publisher Corrupt… Affected: 2003 |
| CVE-2013-1317 | – | May 15 | Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size… Affected: 2003 |
| CVE-2013-1316 | – | May 15 | Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka… Affected: 2003 |
| CVE-2011-3412 | – | Dec 14 | Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka… Affected: 2003; 2007; 2007 |
| CVE-2011-3411 | – | Dec 14 | Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka "Publisher… Affected: 2003 |
| CVE-2011-3410 | – | Dec 14 | Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect… Affected: 2003; 2007; 2007 |
| CVE-2011-1508 | – | Dec 14 | Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute… Affected: 2003; 2007; 2007 |
| CVE-2010-3955 | – | Dec 16 | pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via… Affected: 2002 |
| CVE-2010-3954 | – | Dec 16 | Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file,… Affected: 2002; 2003; 2010 |
| CVE-2010-2571 | – | Dec 16 | Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted… Affected: 2002; 2003 |
| CVE-2010-2570 | – | Dec 16 | Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute… Affected: 2002; 2003; 2007; 2010 |
| CVE-2010-2569 | – | Dec 16 | pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file… Affected: 2002; 2003; 2007 |
| CVE-2010-0479 | – | Apr 14 | Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka… Affected: 2002; 2003; 2007; 2007 |
| CVE-2008-3068 | – | Jul 7 | Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary… Affected: 2003; 2007 |
| CVE-2008-0104 | – | Feb 12 | Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory… Affected: All versions, or not specified |
| CVE-2008-0102 | – | Feb 12 | Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid… Affected: 2000; 2002; 2003 |
| CVE-2007-6534 | – | Dec 27 | Multiple unspecified vulnerabilities in Microsoft Office Publisher allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted PUB file,… Affected: 2000; 2002; 2002; 2003; 2007 |
| CVE-2007-1754 | – | Jul 10 | PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute… Affected: 2007 |
| CVE-2007-1117 | – | Feb 27 | Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "file format… Affected: 2007 |
| CVE-2006-3877 | – | Oct 10 | Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute… Affected: 2000; 2002; 2003 |
| CVE-2006-0001 | – | Sep 12 | Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an… Affected: 2000; 2002; 2003 |
| CVE-2004-0573 | – | Sep 28 | Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute… Affected: 2000; 2002; 2003 |
| CVE-2004-0200 | – | Sep 28 | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code… Affected: 2002; 2003 |
Showing 45