Office 365 Proplus

DATE	CVE	VULNERABILITY TITLE	RISK
2019-04-09	CVE-2019-0801	Data Processing Errors vulnerability in Microsoft Office and Office 365 Proplus A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'. local low complexity microsoft CWE-19	7.8
2019-03-05	CVE-2019-0674	Unspecified vulnerability in Microsoft Office and Office 365 Proplus A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. local low complexity microsoft	7.8
2019-03-05	CVE-2019-0673	Unspecified vulnerability in Microsoft Office and Office 365 Proplus A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. local low complexity microsoft	7.8
2019-03-05	CVE-2019-0672	Unspecified vulnerability in Microsoft Office and Office 365 Proplus A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. local low complexity microsoft	7.8
2019-03-05	CVE-2019-0671	Unspecified vulnerability in Microsoft Office and Office 365 Proplus A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. local low complexity microsoft	7.8
2019-03-05	CVE-2019-0669	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'. network low complexity microsoft	6.5
2019-03-05	CVE-2019-0540	Open Redirect vulnerability in Microsoft products A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'. local low complexity microsoft CWE-601	5.5
2019-01-08	CVE-2019-0585	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server. network low complexity microsoft	8.8
2019-01-08	CVE-2019-0582	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. local low complexity microsoft	7.8
2019-01-08	CVE-2019-0561	Unspecified vulnerability in Microsoft products An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word. local low complexity microsoft	5.5