High

DATE	CVE	VULNERABILITY TITLE	RISK
2024-09-10	CVE-2024-38226	Unspecified vulnerability in Microsoft Office and Publisher Microsoft Publisher Security Feature Bypass Vulnerability local low complexity microsoft	7.3
2024-02-13	CVE-2024-20673	Unspecified vulnerability in Microsoft products Microsoft Office Remote Code Execution Vulnerability local low complexity microsoft	7.8
2023-06-17	CVE-2023-28287	Unspecified vulnerability in Microsoft products Microsoft Publisher Remote Code Execution Vulnerability local low complexity microsoft	7.8
2023-06-17	CVE-2023-28295	Unspecified vulnerability in Microsoft products Microsoft Publisher Remote Code Execution Vulnerability local low complexity microsoft	7.8
2008-07-07	CVE-2008-3068	Remote Information Disclosure vulnerability in Microsoft Crypto API X.509 Certificate Validation Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension. network low complexity microsoft	7.5
2004-09-28	CVE-2004-0573	Unspecified vulnerability in Microsoft products Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website. network low complexity microsoft	7.5