CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Office RTF Stack Buffer Overflow Remote Code Execution Vulnerability (CVE-2010-3333)
[Affected Scope] Microsoft Office XP SP3, 2003 SP3, 2007 SP2, 2010, and Office for Mac 2004, 2008, 2011
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by tricking them into opening a crafted RTF file
[Mitigation] Apply the official Microsoft MS10-087 security patch, or configure File Block settings via Registry to restrict RTF file parsing
Microsoft Excel FEATHEADER Record Memory Corruption and Remote Code Execution Vulnerability (CVE-2009-3129)
[Affected Scope] Microsoft Excel 2002/2003/2007, Office 2004/2008 for Mac, Excel Viewer, and Office Compatibility Pack
[Impact] Opening a specially crafted spreadsheet containing a malicious FEATHEADER record can trigger memory corruption, leading to arbitrary code execution
[Mitigation] Apply the official Microsoft MS09-067 security update immediately and restrict opening untrusted legacy Office documents
Microsoft Excel Object Record Corruption Remote Code Execution Vulnerability (CVE-2009-0557, MS09-021)
[Affected Scope] Microsoft Office 2000 SP3, XP SP3, 2003 SP3, 2007 SP1/SP2, Office for Mac 2004/2008, Excel Viewer, and Compatibility Pack
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted Excel file
[Mitigation] Immediately apply the official Microsoft MS09-021 security update and restrict the execution of untrusted spreadsheet files
Microsoft Office Word Stack-Based Buffer Overflow Vulnerability (CVE-2009-0563) Technical Advisory
[Affected Scope] Microsoft Office Word 2002/2003/2007, Office for Mac 2004/2008, Word Viewer, and Compatibility Pack
[Impact] Remote attackers can execute arbitrary code via a specially crafted Word document containing an invalid length field in a tag
[Mitigation] Apply the official Microsoft security update (MS09-027) immediately and restrict execution of untrusted document files
Microsoft Excel Remote Code Execution (RCE) Zero-Day Vulnerability (CVE-2007-0671)
[Affected Scope] Microsoft Excel 2000, XP, 2003, Excel 2004 for Mac, and potentially other legacy Office products
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted Excel file
[Mitigation] Apply official Microsoft security patches immediately, restrict opening untrusted Excel attachments, and enforce strict macro execution policies
Microsoft Word and Office Suite Remote Code Execution Vulnerability (CVE-2006-2492)
[Affected Scope] Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1/SP2, and Microsoft Works Suite through 2006
[Impact] Remote attackers can execute arbitrary code and gain full system control by tricking a user into opening a specially crafted malicious Word (.doc) document
[Mitigation] Apply the official Microsoft security patch (MS06-027) immediately, and restrict the execution of untrusted email attachments