WO
Product
Word
On CISA KEVExploited in the wildRansomware-linked
321
CVEs
11
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 158Medium 52Low 2
Watch
Add Word to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-3858 | – | Sep 11 | Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility… Affected: 2003; 2007; 2010; 2010 |
| CVE-2013-3857 | – | Sep 11 | Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1 and… Affected: 2003; 2007; 2010; 2010; 2010; 2010 |
| CVE-2013-3856 | – | Sep 11 | Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word… Affected: 2003 |
| CVE-2013-3855 | – | Sep 11 | Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: 2003; 2007 |
| CVE-2013-3854 | – | Sep 11 | Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka… Affected: 2007 |
| CVE-2013-3853 | – | Sep 11 | Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka… Affected: 2007 |
| CVE-2013-3852 | – | Sep 11 | Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service… Affected: 2003; 2007; 2010 |
| CVE-2013-3851 | – | Sep 11 | Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a… Affected: 2003; 2007 |
| CVE-2013-3850 | – | Sep 11 | Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of… Affected: 2003; 2007; 2010; 2010; 2010 |
| CVE-2013-3849 | – | Sep 11 | Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility… Affected: 2003; 2007; 2010; 2010 |
| CVE-2013-3848 | – | Sep 11 | Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility… Affected: 2003; 2007; 2010 |
| CVE-2013-3847 | – | Sep 11 | Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility… Affected: 2003; 2007; 2010 |
| CVE-2013-3160 | – | Sep 11 | Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbitrary files via an XML document containing an external… Affected: 2003; 2007 |
| CVE-2013-1335 | – | May 15 | Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability." Affected: 2003 |
| CVE-2012-2528 | – | Oct 9 | Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft… Affected: 2003; 2007; 2007; 2010 |
| CVE-2012-0182 | – | Oct 9 | Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execute arbitrary code via a crafted… Affected: 2007; 2007 |
| CVE-2012-0183 | – | May 9 | Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a… Affected: 2003; 2007; 2007 |
| CVE-2010-3221 | – | Oct 13 | Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote… Affected: 2002; 2003 |
| CVE-2010-3220 | – | Oct 13 | Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory… Affected: 2002 |
| CVE-2010-3219 | – | Oct 13 | Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka "Word Index… Affected: 2002 |
| CVE-2010-3218 | – | Oct 13 | Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka "Word Heap Overflow… Affected: 2002 |
| CVE-2010-3217 | – | Oct 13 | Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka… Affected: 2002 |
| CVE-2010-3216 | – | Oct 13 | Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid… Affected: 2002 |
| CVE-2010-3215 | – | Oct 13 | Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute… Affected: 2002 |
| CVE-2010-3214 | – | Oct 13 | Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility… Affected: 2002; 2003; 2007; 2010; 2010 |
| CVE-2010-2750 | – | Oct 13 | Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption,… Affected: 2002 |
| CVE-2010-2748 | – | Oct 13 | Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary… Affected: 2002 |
| CVE-2010-2747 | – | Oct 13 | Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute… Affected: 2002 |
| CVE-2010-3200 | – | Sep 20 | MSO.dll in Microsoft Word 2003 SP3 11.8326.11.8324 allows remote attackers to cause a denial of service (NULL pointer dereference and multiple-instance application crash) via a… Affected: 2003 |
| CVE-2010-1903 | – | Aug 11 | Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: 2002; 2003 |
| CVE-2010-1902 | – | Aug 11 | Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and… Affected: 2002; 2003; 2007 |
| CVE-2010-1901 | – | Aug 11 | Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office… Affected: 2002; 2003; 2007 |
| CVE-2010-1900 | – | Aug 11 | Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility… Affected: 2002; 2003; 2007 |
| CVE-2008-6063 | – | Feb 5 | Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers… Affected: 2007 |
| CVE-2008-2752 | – | Jun 18 | Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly handle unordered lists, which allows user-assisted remote attackers to cause a denial of service (memory… Affected: 2000; 2000; 2000; 2000; 2000; 2003; +3 more |
| CVE-2008-1092 | – | Mar 25 | Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the… Affected: 2000; 2002; 2003; 2003_sp3; 2007; 2007_sp1 |
| CVE-2008-0109 | – | Feb 12 | Word in Microsoft Office 2000 SP3, XP SP3, Office 2003 SP2, and Office Word Viewer 2003 allows remote attackers to execute arbitrary code via crafted fields within the File… Affected: All versions, or not specified |
| CVE-2007-3899 | – | Oct 9 | Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a malformed string… Affected: 2000; 2002 |
| CVE-2007-1202 | – | May 8 | Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly parse certain rich text "property… Affected: 2000; 2002; 2003; 2004 |
| CVE-2007-1911 | – | Apr 10 | Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU consumption) via crafted documents, as demonstrated by (1)… Affected: 2007 |
| CVE-2007-1910 | – | Apr 10 | Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted… Affected: 2007 |
| CVE-2007-0208 | – | Feb 13 | Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn… Affected: 2000; 2002; 2003 |
| CVE-2007-0870 | – | Feb 11 | Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service (crash) via unknown vectors, a different vulnerability than CVE-2006-5994,… Affected: 2000 |
| CVE-2007-0515 | – | Jan 26 | Unspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute arbitrary code on Word 2000, and cause a denial of service on Word 2003, via unknown… Affected: 2000; 2002; 2003 |
| CVE-2006-6561 | – | Dec 14 | Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers… Affected: 2000; 2002; 2003 |
| CVE-2006-6456 | – | Dec 11 | Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data… Affected: 2000; 2002; 2003 |
| CVE-2006-5994 | – | Dec 6 | Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v Affected: 2000; 2002; 2003 |
| CVE-2006-4693 | – | Oct 10 | Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a… Affected: 2004 |
| CVE-2006-3877 | – | Oct 10 | Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office 2002, Office 2003, Office 2004 for Mac, and Office v.X for Mac allows user-assisted attackers to execute… Affected: 2000; 2002; 2003 |
| CVE-2006-3651 | – | Oct 10 | Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different… Affected: 2000; 2002 |