Word Viewer vulnerabilities | LiveThreat CVE Feed

Product

Word Viewer

by Microsoft · last CVE Mar 5, 2019

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities87 In the news0 Timeline

Severity mix

Critical 1High 32Medium 6Low 0

Severity

All severities87 Critical1 High32 Medium6 Low0

Exploitation

On CISA KEV5 Exploited in the wild5

Watch

Add Word Viewer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-2424 In wildKEV	8.8	40%	Jul 14	Microsoft PowerPoint Memory Corruption Vulnerability Affected: All versions, or not specified
CVE-2007-0671 In wildKEV	8.8	43%	Feb 3	Microsoft Office Excel Remote Code Execution Vulnerability Affected: 2003
CVE-2016-7193 In wildKEV	7.8	58%	Oct 14	Microsoft Office Memory Corruption Vulnerability Affected: All versions, or not specified
CVE-2014-1761 In wildKEV	7.8	78%	Mar 24	Microsoft Word Memory Corruption Vulnerability Affected: All versions, or not specified
CVE-2013-3906 In wildKEV	7.8	85%	Nov 6	Microsoft Graphics Component Memory Corruption Vulnerability Affected: All versions, or not specified
CVE-2016-0145	8.8	41%	Apr 12	The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold… Affected: All versions, or not specified
CVE-2013-0006	8.8	28%	Jan 9	Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka… Affected: All versions, or not specified
CVE-2009-2502	8.1	22%	Oct 14	Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002… Affected: 2003; 2003
CVE-2018-8432	7.8	20%	Oct 10	A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution… Affected: All versions, or not specified
CVE-2018-0797	7.8	25%	Jan 10	Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word… Affected: All versions, or not specified
CVE-2017-0254	7.8	20%	May 12	Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps… Affected: All versions, or not specified
CVE-2017-0108	7.8	50%	Mar 17	The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5;… Affected: All versions, or not specified
CVE-2017-0053	7.8	17%	Mar 17	Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer allow remote attackers to… Affected: All versions, or not specified
CVE-2016-7298	7.8	23%	Dec 20	Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service… Affected: All versions, or not specified
CVE-2016-3396	7.8	24%	Oct 14	Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;… Affected: All versions, or not specified
CVE-2016-3357	7.8	55%	Sep 14	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on… Affected: All versions, or not specified
CVE-2016-3317	7.8	22%	Aug 9	Microsoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word for Mac 2011, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file,… Affected: All versions, or not specified
CVE-2016-3304	7.8	51%	Aug 9	The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016,… Affected: All versions, or not specified
CVE-2016-3303	7.8	51%	Aug 9	The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016,… Affected: All versions, or not specified
CVE-2016-3301	7.8	44%	Aug 9	The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows… Affected: All versions, or not specified
CVE-2016-3313	7.8	50%	Aug 9	Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka… Affected: All versions, or not specified
CVE-2016-3283	7.8	20%	Jul 13	Microsoft Word Viewer allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Affected: All versions, or not specified
CVE-2016-3282	7.8	26%	Jul 13	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: All versions, or not specified
CVE-2016-3280	7.8	20%	Jul 13	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word Viewer… Affected: All versions, or not specified
CVE-2016-0198	7.8	29%	May 11	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word… Affected: All versions, or not specified
CVE-2016-0127	7.8	21%	Apr 12	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server… Affected: All versions, or not specified
CVE-2016-0134	7.8	22%	Mar 9	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: All versions, or not specified
CVE-2016-0053	7.8	19%	Feb 10	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on… Affected: All versions, or not specified
CVE-2016-0052	7.8	19%	Feb 10	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: All versions, or not specified
CVE-2016-0022	7.8	19%	Feb 10	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word… Affected: All versions, or not specified
CVE-2016-0010	7.8	21%	Jan 13	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, Excel 2016 for Mac,… Affected: All versions, or not specified
CVE-2016-7268	7.1	23%	Dec 20	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and… Affected: All versions, or not specified