Vulnerabilities > Microsoft > Office > 2013

DATE CVE VULNERABILITY TITLE RISK
2017-06-15 CVE-2017-8510 Unspecified vulnerability in Microsoft Excel, Office and Word
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".
network
low complexity
microsoft
8.8
2017-06-15 CVE-2017-8509 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".
network
low complexity
microsoft
8.8
2017-06-15 CVE-2017-0260 Unspecified vulnerability in Microsoft Office, Windows 7 and Windows Server 2008
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".
local
low complexity
microsoft
7.8
2017-05-12 CVE-2017-0281 Unspecified vulnerability in Microsoft products
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word 2016, and Skype for Business 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".
local
low complexity
microsoft
7.8
2017-05-12 CVE-2017-0262 Unspecified vulnerability in Microsoft Office 2010/2013/2016
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".
local
low complexity
microsoft
7.8
2017-05-12 CVE-2017-0261 Use After Free vulnerability in Microsoft Office 2010/2013/2016
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability".
local
low complexity
microsoft CWE-416
7.8
2017-04-12 CVE-2017-0199 Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."
local
low complexity
microsoft philips
7.8
2016-12-20 CVE-2016-7276 Out-of-bounds Read vulnerability in Microsoft Office and Office for mac
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."
local
low complexity
microsoft CWE-125
7.1
2016-12-20 CVE-2016-7275 Data Processing Errors vulnerability in Microsoft Office 2010/2013/2016
Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."
local
low complexity
microsoft CWE-19
7.8
2016-11-10 CVE-2016-7245 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Office
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, and Office 2016 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
local
low complexity
microsoft CWE-119
7.8