High

DATE	CVE	VULNERABILITY TITLE	RISK
2019-12-10	CVE-2019-1462	Use of Uninitialized Resource vulnerability in Microsoft Office, Office 365 Proplus and Powerpoint A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution Vulnerability'. local low complexity microsoft CWE-908	7.8
2019-11-12	CVE-2019-1457	Incorrect Permission Assignment for Critical Resource vulnerability in Microsoft Office 2016/2019 A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka 'Microsoft Office Excel Security Feature Bypass'. local low complexity microsoft CWE-732	7.8
2019-11-12	CVE-2019-1448	Unspecified vulnerability in Microsoft Excel, Office and Office 365 Proplus A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. local low complexity microsoft	7.8
2019-10-10	CVE-2019-1331	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. network low complexity microsoft	8.8
2019-09-11	CVE-2019-1297	Unspecified vulnerability in Microsoft Excel, Office and Office 365 Proplus A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. network low complexity microsoft	8.8
2019-09-11	CVE-2019-1264	Improper Input Validation vulnerability in Microsoft Office, Office 365 Proplus and Project A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feature Bypass Vulnerability'. local low complexity microsoft CWE-20	7.8
2019-09-11	CVE-2019-1246	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. local low complexity microsoft	7.8
2019-08-14	CVE-2019-1205	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. local low complexity microsoft	7.8
2019-08-14	CVE-2019-1201	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. local low complexity microsoft	7.8
2019-08-14	CVE-2019-1200	Unspecified vulnerability in Microsoft Office, Office 365 Proplus and Outlook A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. local low complexity microsoft	7.8