High

DATE	CVE	VULNERABILITY TITLE	RISK
2024-09-10	CVE-2024-38226	Unspecified vulnerability in Microsoft Office and Publisher Microsoft Publisher Security Feature Bypass Vulnerability local low complexity microsoft	7.3
2020-04-15	CVE-2020-0760	Unspecified vulnerability in Microsoft products A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. network low complexity microsoft	8.8
2018-06-14	CVE-2018-8245	Unspecified vulnerability in Microsoft Publisher 2010 A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher. local low complexity microsoft	7.8
2017-09-13	CVE-2017-8725	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Publisher 2007/2010 A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microsoft Office Publisher Remote Code Execution". local low complexity microsoft CWE-119	7.8
2016-12-20	CVE-2016-7289	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft Publisher 2010 Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." local low complexity microsoft CWE-119	7.8