CVSS: 7.3EPSS: 61%CPEs: 1EXPL: 0CVE-2024-38226 – Microsoft Publisher Protection Mechanism Failure Vulnerability
https://notcve.org/view.php?id=CVE-2024-38226
10 Sep 2024 — Microsoft Publisher Security Feature Bypass Vulnerability Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38226 • CWE-693: Protection Mechanism Failure •
CVSS: 7.8EPSS: 1%CPEs: 9EXPL: 0CVE-2024-20673 – Microsoft Office Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-20673
13 Feb 2024 — Microsoft Office Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Office • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20673 • CWE-693: Protection Mechanism Failure •
CVSS: 7.8EPSS: 1%CPEs: 5EXPL: 0CVE-2023-28295 – Microsoft Publisher Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-28295
17 Jun 2023 — Microsoft Publisher Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28295 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 2%CPEs: 5EXPL: 0CVE-2023-28287 – Microsoft Publisher Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-28287
17 Jun 2023 — Microsoft Publisher Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28287 • CWE-416: Use After Free •
CVSS: 5.5EPSS: 0%CPEs: 13EXPL: 0CVE-2022-29107 – Microsoft Office Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2022-29107
10 May 2022 — Microsoft Office Security Feature Bypass Vulnerability Una vulnerabilidad de Omisión de Funciones de Seguridad de Microsoft Office • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29107 •
CVSS: 8.8EPSS: 37%CPEs: 33EXPL: 0CVE-2020-0760
https://notcve.org/view.php?id=CVE-2020-0760
15 Apr 2020 — A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991. Hay una vulnerabilidad de ejecución de código remota cuando Microsoft Office carga inapropiadamente bibliotecas de tipos arbitrarios, también se conoce como "Microsoft Office Remote Code Execution Vulnerability". Este ID de CVE es diferente de CVE-2020-0991. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0760 •
CVSS: 7.8EPSS: 22%CPEs: 1EXPL: 0CVE-2018-8245
https://notcve.org/view.php?id=CVE-2018-8245
14 Jun 2018 — A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher. Existe una vulnerabilidad de ejecución remota de código cuando Microsoft Publisher fracasa a la hora de utilizar características que bloquean la zona Local Machine al instanciar objetos OLE. Esto también se conoce como "Microsoft Publisher Remote Co... • http://www.securityfocus.com/bid/104405 •
CVSS: 9.3EPSS: 32%CPEs: 2EXPL: 0CVE-2017-8725
https://notcve.org/view.php?id=CVE-2017-8725
13 Sep 2017 — A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microsoft Office Publisher Remote Code Execution". Existe una vulnerabilidad de ejecución remota de código en Microsoft Publisher 2007 Service Pack 3 y Microsoft Publisher 2010 Service Pack 2 cuando no manejan correctamente los objetos en la memoria. Esto también se conoce como "Microsoft Office Publisher Remote Code Exe... • http://www.securityfocus.com/bid/100758 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 33%CPEs: 1EXPL: 0CVE-2016-7289
https://notcve.org/view.php?id=CVE-2016-7289
20 Dec 2016 — Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Microsoft Publisher 2010 SP2 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un documento manipulado, vulnerabilidad también conocida como "Microsoft Office Memory Corruption Vulnerability". • http://fortiguard.com/advisory/FG-VD-16-068 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 31%CPEs: 44EXPL: 0CVE-2015-2503
https://notcve.org/view.php?id=CVE-2015-2503
11 Nov 2015 — Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, Excel 2010 SP2, InfoPath 2010 SP2, OneNote 2010 SP2, PowerPoint 2010 SP2, Project 2010 SP2, Publisher 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Pinyin IME 2010, Access 2013 SP1, Excel 2013 SP1, InfoPath 2013 SP1, OneNote 2013 SP1, PowerPoint 2013 SP1, Project 2013 SP1, Publisher 2013 SP1, Visi... • http://www.securitytracker.com/id/1034117 • CWE-264: Permissions, Privileges, and Access Controls •