Word Automation Services vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WA

Product

Word Automation Services

by Microsoft · last CVE Jan 8, 2019

11

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 0High 5Medium 4Low 0

Severity

All severities11 Critical0 High5 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Word Automation Services to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-0585	8.8	22%	Jan 8	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution… Affected: All versions, or not specified
CVE-2018-1028	8.8	19%	Apr 12	A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code… Affected: All versions, or not specified
CVE-2017-8512	8.8	22%	Jun 15	A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability" Affected: All versions, or not specified
CVE-2016-7291	7.1	23%	Dec 20	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: All versions, or not specified
CVE-2016-7290	7.1	23%	Dec 20	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: All versions, or not specified
CVE-2016-7233	6.5	22%	Nov 10	Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint… Affected: All versions, or not specified
CVE-2019-0561	5.5	8%	Jan 8	An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects… Affected: All versions, or not specified
CVE-2018-8378	5.5	7%	Aug 15	An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: All versions, or not specified
CVE-2017-0105	5.5	30%	Mar 17	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web… Affected: All versions, or not specified
CVE-2015-0064	–	30%	Feb 11	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack… Affected: All versions, or not specified
CVE-2012-2528	–	22%	Oct 9	Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft… Affected: All versions, or not specified