CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Outlook Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2017-11774) Deep Dive & Mitigation Guide
[Affected Scope] Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and Office memory handling components
[Impact] Attackers can bypass the Outlook sandbox and execute arbitrary OS commands with local user privileges by injecting malicious Folder Home Page properties
[Mitigation] Apply official Microsoft security updates and disable the Outlook Folder Home Page feature via registry modifications
Microsoft Office OLE Composite Moniker Remote Code Execution Vulnerability (CVE-2017-8570) Analysis and Mitigation Guide
[Affected Scope] Microsoft Office 2007, 2010, 2013, 2016 and related productivity components
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user via crafted Office documents containing malicious OLE objects
[Mitigation] Apply official Microsoft security patches immediately and restrict the execution of untrusted OLE/ActiveX components
Microsoft Office Remote Code Execution Vulnerability (CVE-2017-0262) Security Advisory
[Affected Scope] Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016
[Impact] Remote attackers can execute arbitrary code in the context of the current user by tricking them into opening a document containing a malicious EPS file
[Mitigation] Apply official Microsoft security patches immediately, or disable the EPS filter via registry modification
Microsoft Office Remote Code Execution Vulnerability (CVE-2017-0261) Security Advisory and Mitigation Guide
[Affected Scope] Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016.
[Impact] Remote attackers can execute arbitrary code in the context of the current user and fully compromise the target system via crafted Office documents.
[Mitigation] Apply official Microsoft security patches immediately or disable the vulnerable EPS (Encapsulated PostScript) filter via registry modification.
Microsoft Office & WordPad OLE Remote Code Execution Vulnerability (CVE-2017-0199) Deep Dive & Mitigation Guide
[Affected Scope] Microsoft Office 2007/2010/2013/2016, Windows Vista/7/8.1, and Windows Server 2008
[Impact] Remote attackers can execute arbitrary code with the logged-in user's privileges by enticing a user to open a specially crafted document
[Mitigation] Apply official Microsoft security patches immediately, restrict opening untrusted documents, and disable automatic OLE link updates via registry hardening
Microsoft Excel Remote Code Execution and Security Feature Bypass Vulnerability (CVE-2016-7262)
[Affected Scope] Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer
[Impact] User-assisted remote attackers can execute arbitrary commands with the logged-in user's privileges by tricking a user into clicking a crafted cell
[Mitigation] Apply the official Microsoft MS16-148 security update immediately and restrict opening untrusted Office documents
Microsoft Office and Word Memory Corruption Remote Code Execution Vulnerability (CVE-2016-7193, MS16-121)
[Affected Scope] Microsoft Word 2007 to 2016, Word for Mac 2011/2016, Word Automation Services on SharePoint Server, Office Web Apps, and Office Online Server.
[Impact] Remote attackers can execute arbitrary code under the security context of the current user by tricking them into opening a specially crafted RTF document.
[Mitigation] Apply the official MS16-121 security updates immediately, or implement File Block policies via Registry/GPO to restrict RTF document parsing.
Microsoft Office EPS Image Parsing Remote Code Execution Vulnerability (CVE-2015-2545) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user and compromise the host system by tricking a user into opening a document containing a malformed EPS image
[Mitigation] Apply the official MS15-099 security update immediately, or disable the EPS graphics filter via registry modifications to prevent exploitation
Microsoft Office Memory Corruption Remote Code Execution Vulnerability (CVE-2015-1642, MS15-081)
[Affected Scope] Windows endpoint environments running Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1.
[Impact] Remote attackers can execute arbitrary code (RCE) with the privileges of the logged-in user by tricking them into opening a specially crafted Office document.
[Mitigation] Immediately apply the official Microsoft security updates (MS15-081) and enforce strict security policies on untrusted email attachments.
Microsoft Office Word & PowerPoint Memory Corruption Remote Code Execution Vulnerability (CVE-2015-2424, MS15-070)
[Affected Scope] Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1 (Word and PowerPoint)
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (DoS) via a crafted Office document
[Mitigation] Apply the MS15-070 security update immediately and restrict opening untrusted Office documents
Microsoft DirectWrite TrueType Font Parsing Remote Code Execution Vulnerability (CVE-2015-1671, MS15-044)
[Affected Scope] Microsoft .NET Framework, Office 2007/2010, Lync 2010/2013, and Silverlight 5 utilizing the DirectWrite library
[Impact] Remote attackers can execute arbitrary code (RCE) with the privileges of the active user by tricking the system into rendering a specially crafted TrueType font
[Mitigation] Immediately apply the official Microsoft security updates (MS15-044) and restrict the loading of untrusted fonts via system policies
Microsoft Office RTF Memory Corruption Vulnerability (CVE-2015-1641, MS15-033) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Word 2007/2010/2013, Office 2010/2013, Word for Mac 2011, SharePoint Server 2010/2013, and Office Web Apps Server 2010/2013
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by enticing them to open a specially crafted RTF document
[Mitigation] Immediately apply the official Microsoft security updates (MS15-033) or implement registry-based File Block policies to restrict RTF parsing
Microsoft Windows and Office IME (Japanese) Elevation of Privilege and Sandbox Escape (CVE-2014-4077)
[Affected Scope] Windows Server 2003/2008, Windows Vista, Windows 7, and Office 2007 environments with the Japanese Input Method Editor (IME) component IMJPDCT.EXE installed
[Impact] Remote attackers can bypass sandbox protection mechanisms via crafted PDF documents, escalating privileges to execute arbitrary code on the host system
[Mitigation] Apply the official Microsoft security update (MS14-078) or restrict execution permissions on the IMJPDCT.EXE binary
Microsoft Word and Office RTF Memory Corruption Remote Code Execution Vulnerability (CVE-2014-1761) Analysis & Mitigation Guide
[Affected Scope] Microsoft Word 2003 to 2013, Office for Mac 2011, SharePoint Server Word Automation Services, and Office Web Apps.
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (system crash) by tricking a user into opening a crafted RTF document.
[Mitigation] Apply the official MS14-017 security patch immediately, or implement File Block policies to disable RTF parsing in Microsoft Word.
Microsoft Windows GDI+ and Office TIFF Image Processing Remote Code Execution Vulnerability (CVE-2013-3906)
[Affected Scope] Windows Vista SP2, Server 2008 SP2, Office 2003/2007/2010, Lync 2010/2013
[Impact] Remote attackers can execute arbitrary code via a specially crafted TIFF image embedded in documents or emails
[Mitigation] Apply the MS13-096 security patch or implement registry workarounds to disable TIFF rendering in GDI+
Microsoft Office PNG Image Parsing Buffer Overflow Remote Code Execution Vulnerability (CVE-2013-1331, MS13-051)
[Affected Scope] Microsoft Office 2003 SP3 and Office 2011 for Mac.
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by tricking them into opening a crafted Office document containing malicious PNG data.
[Mitigation] Apply the official MS13-051 security patch immediately, or upgrade legacy, end-of-life Office installations to a supported version.
Microsoft MSCOMCTL.OCX TabStrip ActiveX Control Remote Code Execution Vulnerability (CVE-2012-1856)
[Affected Scope] Systems running Microsoft Office 2003/2007/2010, SQL Server 2000/2005/2008, or Visual Basic 6.0 Runtime utilizing MSCOMCTL.OCX
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by corrupting system memory via crafted documents or web pages
[Mitigation] Apply the official Microsoft MS12-060 security update or configure ActiveX Kill Bits for the vulnerable TabStrip control
Microsoft Office and VBA VBE6.dll Untrusted Search Path Vulnerability (CVE-2012-1854) Advisory
[Affected Scope] Microsoft Office 2003 SP3, 2007 SP2/SP3, 2010 Gold/SP1, and systems utilizing Visual Basic for Applications (VBA)
[Impact] Local attackers can execute arbitrary code and escalate privileges by tricking a user into opening a document in a directory containing a malicious DLL
[Mitigation] Apply the official Microsoft security update (MS12-046) and restrict insecure DLL loading via registry modifications
Microsoft Office and SQL Server MSCOMCTL.OCX ActiveX Control Remote Code Execution Vulnerability (CVE-2012-0158)
[Affected Scope] Microsoft Office 2003/2007/2010, SQL Server 2000/2005/2008, and Visual Basic 6.0 Runtime utilizing the MSCOMCTL.OCX library
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by enticing them to open a crafted Office document, RTF file, or malicious website
[Mitigation] Apply the official Microsoft MS12-027 security patch immediately, or configure registry Kill-Bits to disable the vulnerable ActiveX controls
Adobe Flash Player and Reader Object Type Confusion Remote Code Execution Vulnerability (CVE-2011-0611)
[Affected Scope] Adobe Flash Player before 10.2.154.27, Adobe Reader/Acrobat 9.x and 10.x, and Microsoft Office documents containing embedded Flash (.swf) files.
[Impact] Remote attackers can execute arbitrary code or cause a denial of service (DoS) via crafted Flash content embedded in documents or web pages.
[Mitigation] Immediately uninstall legacy Adobe Flash Player, update Adobe Reader/Acrobat to the patched versions, and restrict Flash execution in Office documents.