Filtered by vendor Microsoft Subscriptions
Filtered by product Office Subscriptions
Total 879 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-28285 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-01-23 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-49065 1 Microsoft 5 365 Apps, Office, Office Long Term Servicing Channel and 2 more 2025-01-21 5.5 Medium
Microsoft Office Remote Code Execution Vulnerability
CVE-2024-43600 1 Microsoft 1 Office 2025-01-21 7.8 High
Microsoft Office Elevation of Privilege Vulnerability
CVE-2024-49142 1 Microsoft 4 365 Apps, Access, Office and 1 more 2025-01-21 7.8 High
Microsoft Access Remote Code Execution Vulnerability
CVE-2024-49069 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2025-01-21 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-49059 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-01-21 7 High
Microsoft Office Elevation of Privilege Vulnerability
CVE-2008-0081 1 Microsoft 3 Excel, Excel Viewer, Office 2025-01-17 9.8 Critical
Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.
CVE-2013-3129 1 Microsoft 14 .net Framework, Lync, Lync Basic and 11 more 2025-01-16 7.8 High
Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT; GDI+ in Office 2003 SP3, 2007 SP3, and 2010 SP1; GDI+ in Visual Studio .NET 2003 SP1; and GDI+ in Lync 2010, 2010 Attendee, 2013, and Basic 2013 allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."
CVE-2013-0006 1 Microsoft 15 Expression Web, Groove Server, Office and 12 more 2025-01-16 8.8 High
Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."
CVE-2024-30042 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2025-01-08 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-36413 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-01-08 6.5 Medium
Microsoft Office Security Feature Bypass Vulnerability
CVE-2023-36041 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2025-01-08 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-36045 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-01-08 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2023-36037 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2025-01-08 7.8 High
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2022-41043 1 Microsoft 2 Office, Office Long Term Servicing Channel 2025-01-02 3.3 Low
Microsoft Office Information Disclosure Vulnerability
CVE-2022-41031 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-01-02 7.8 High
Microsoft Word Remote Code Execution Vulnerability
CVE-2022-38049 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-01-02 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-38048 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-01-02 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2022-38001 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-01-02 6.5 Medium
Microsoft Office Spoofing Vulnerability
CVE-2022-44713 1 Microsoft 2 Office, Office Long Term Servicing Channel 2025-01-02 7.5 High
Microsoft Outlook for Mac Spoofing Vulnerability