CVSS: 9.3EPSS: 37%CPEs: 16EXPL: 0CVE-2019-0585 – Microsoft Office Word wwlib Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2019-0585
08 Jan 2019 — A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Word cuando no gestiona correctamente objetos en la memoria.... • http://www.securityfocus.com/bid/106392 •
CVSS: 9.3EPSS: 18%CPEs: 7EXPL: 0CVE-2018-8573 – Microsoft Word doc File Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2018-8573
14 Nov 2018 — A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8539. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Word cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsoft Word Remote Code Execution Vulnerabil... • http://www.securityfocus.com/bid/105836 •
CVSS: 9.3EPSS: 16%CPEs: 12EXPL: 0CVE-2018-8504
https://notcve.org/view.php?id=CVE-2018-8504
10 Oct 2018 — A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Office 365 ProPlus, Microsoft Office, Microsoft Word. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Word cuando no gestiona correctamente objetos en vista protegida. Esto también se conoce como "Microsoft Word Remote Code Execution ... • http://www.securityfocus.com/bid/105499 •
CVSS: 7.5EPSS: 5%CPEs: 6EXPL: 0CVE-2018-8310
https://notcve.org/view.php?id=CVE-2018-8310
11 Jul 2018 — A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka "Microsoft Office Tampering Vulnerability." This affects Microsoft Word, Microsoft Office. Existe una vulnerabilidad de falsificación cuando Microsoft Outlook no gestiona adecuadamente tipos de adjunto específicos al renderizar emails HTML. Esto también se conoce como "Microsoft Office Tampering Vulnerability". Esto afecta a Microsoft Word y Microsoft Office. • http://www.securityfocus.com/bid/104615 •
CVSS: 9.3EPSS: 14%CPEs: 13EXPL: 0CVE-2018-8161
https://notcve.org/view.php?id=CVE-2018-8161
09 May 2018 — A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Word, Word, Microsoft Office, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8157, CVE-2018-8158. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Office cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsof... • http://www.securityfocus.com/bid/104052 •
CVSS: 6.5EPSS: 15%CPEs: 8EXPL: 0CVE-2018-0950
https://notcve.org/view.php?id=CVE-2018-0950
12 Apr 2018 — An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique from CVE-2018-1007. Existe una vulnerabilidad de divulgación de información cuando Office renderiza los mensajes de email en formato RTF (Rich Text Format) que contienen objetos OLE cuando se abre o previsualiza un ... • http://www.securityfocus.com/bid/103642 •
CVSS: 4.3EPSS: 4%CPEs: 13EXPL: 0CVE-2018-0919
https://notcve.org/view.php?id=CVE-2018-0919
14 Mar 2018 — Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2010 SP2, Word 2013 SP1 and Microsoft Word 2016 allow an information disclosure vulnerability due to how variables are initialized, aka "Microsoft Office Information Disclosure Vul... • http://www.securityfocus.com/bid/103311 • CWE-125: Out-of-bounds Read CWE-908: Use of Uninitialized Resource •
CVSS: 9.3EPSS: 12%CPEs: 17EXPL: 0CVE-2018-0922
https://notcve.org/view.php?id=CVE-2018-0922
14 Mar 2018 — Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft Office Word Viewer, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Compatibility Pack SP2, Microsoft Online Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2007 SP3, Microsoft Word 2010 SP2, Wor... • http://www.securityfocus.com/bid/103314 • CWE-787: Out-of-bounds Write •
CVSS: 9.3EPSS: 29%CPEs: 11EXPL: 0CVE-2018-0845
https://notcve.org/view.php?id=CVE-2018-0845
22 Jan 2018 — Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0805, CVE-2018-0806, and CVE-2018-0807. Equation Editor en Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013 y Microsoft Office 2016 permite una vulnera... • http://www.securityfocus.com/bid/102746 •
CVSS: 9.3EPSS: 28%CPEs: 11EXPL: 0CVE-2018-0848
https://notcve.org/view.php?id=CVE-2018-0848
22 Jan 2018 — Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0805, CVE-2018-0806, and CVE-2018-0807. Equation Editor en Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013 y Microsoft Office 2016 permite una vulnera... • http://www.securityfocus.com/bid/102747 •