PU
Product
Publisher
On CISA KEVExploited in the wild
45
CVEs
2
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 11Medium 1Low 0
Watch
Add Publisher to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-0671 In wildKEV | 8.8 | Feb 3 | Microsoft Office Excel Remote Code Execution Vulnerability Affected: 2000; 2002; 2003 |
| CVE-2024-38226 In wildKEV | 7.3 | Sep 10 | Microsoft Publisher Security Feature Bypass Vulnerability Affected: 2016; 2016 |
| CVE-2026-81385 | 8.8 | Sep 8 | Microsoft Office Publisher Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2026-69742 | 8.8 | Sep 8 | Microsoft Office Publisher Remote Code Execution Vulnerability Affected: 2016; 2016 |
| CVE-2020-0760 | 8.8 | Apr 15 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability' Affected: 2010; 2013; 2016 |
| CVE-2024-20673 | 7.8 | Feb 13 | Microsoft Office Remote Code Execution Vulnerability Affected: 2016 |
| CVE-2023-28295 | 7.8 | Jun 17 | Microsoft Publisher Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2023-28287 | 7.8 | Jun 17 | Microsoft Publisher Remote Code Execution Vulnerability Affected: 2013; 2016 |
| CVE-2018-8245 | 7.8 | Jun 14 | A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka… Affected: 2010 |
| CVE-2017-8725 | 7.8 | Sep 13 | A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in… Affected: 2007; 2010 |
| CVE-2016-7289 | 7.8 | Dec 20 | Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office… Affected: 2010 |
Showing 11