Vulnerabilities > Microsoft > Office

DATE CVE VULNERABILITY TITLE RISK
2018-12-12 CVE-2018-8587 Unspecified vulnerability in Microsoft Office and Office 365 Proplus
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
local
low complexity
microsoft
7.8
2018-11-14 CVE-2018-8579 Unspecified vulnerability in Microsoft Office and Office 365 Proplus
An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office.
network
low complexity
microsoft
6.5
2018-11-14 CVE-2018-8577 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel.
local
low complexity
microsoft
7.8
2018-11-14 CVE-2018-8576 Unspecified vulnerability in Microsoft Office, Office 365 Proplus and Outlook
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
local
low complexity
microsoft
7.8
2018-11-14 CVE-2018-8574 Unspecified vulnerability in Microsoft Office and Office 365 Proplus
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel.
local
low complexity
microsoft
7.8
2018-11-14 CVE-2018-8573 Unspecified vulnerability in Microsoft Office, Office 365 Proplus and Word
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office.
local
low complexity
microsoft
7.8
2018-11-14 CVE-2018-8558 Information Exposure vulnerability in Microsoft Office and Office 365 Proplus
An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office.
network
low complexity
microsoft CWE-200
6.5
2018-11-14 CVE-2018-8546 Unspecified vulnerability in Microsoft products
A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype.
network
high complexity
microsoft
5.9
2018-11-14 CVE-2018-8539 Unspecified vulnerability in Microsoft Office, Office web Apps and Sharepoint Server
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Microsoft Office.
local
low complexity
microsoft
7.8
2018-11-14 CVE-2018-8524 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
local
low complexity
microsoft
7.8