Vulnerabilidades do Microsoft Office

CVE-2025-59225 Alta · 7.8 CWE-416 14/10/2025

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59224 Alta · 7.8 CWE-416 14/10/2025

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59223 Alta · 7.8 CWE-416 14/10/2025

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

CVE-2025-59222 Alta · 7.8 CWE-416 14/10/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2025-59221 Alta · 7.0 CWE-416 14/10/2025

Microsoft Word Remote Code Execution Vulnerability

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

CVE-2023-35636 Média · 6.5 CWE-200 12/12/2023

Microsoft Outlook Information Disclosure Vulnerability

CVE-2023-36761 Média · 6.5 KEV Alta · 53 CWE-20 12/09/2023

Microsoft Word Information Disclosure Vulnerability

CVE-2023-23397 Crítica · 9.8 KEV Alta · 66 Exploit público CWE-294 14/03/2023

Microsoft Office Outlook Privilege Escalation Vulnerability

Microsoft Outlook Elevation of Privilege Vulnerability

CVE-2021-42292 Alta · 7.8 KEV Alta · 62 Exploit público 09/11/2021

Microsoft Excel Security Feature Bypass

Microsoft Excel Security Feature Bypass Vulnerability

CVE-2021-38646 Alta · 7.8 KEV Alta · 65 Ransomware 15/09/2021

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

CVE-2021-27059 Alta · 7.6 KEV Alta · 55 11/03/2021

Microsoft Office Remote Code Execution Vulnerability

CVE-2019-1297 Alta · 8.8 KEV Alta · 56 11/09/2019

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

CVE-2019-0541 Alta · 8.8 KEV Alta · 64 Exploit público CWE-77 08/01/2019

Microsoft MSHTML Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.

CVE-2018-0852 Alta · 8.8 CWE-787 15/02/2018

Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1,...

Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Outlook handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0851.

CVE-2018-0851 Alta · 8.8 CWE-787 15/02/2018

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft...

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.

CVE-2018-0802 Alta · 7.8 KEV Urgente · 82 Exploit público Ransomware CWE-787 09/01/2018

Microsoft Office Memory Corruption Vulnerability

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.

CVE-2018-0798 Alta · 8.8 KEV Urgente · 72 Exploit público CWE-787 09/01/2018

Microsoft Office Memory Corruption Vulnerability

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".

CVE-2017-11882 Alta · 7.8 KEV Urgente · 96 Exploit público Ransomware CWE-119 15/11/2017

Microsoft Office Memory Corruption Vulnerability

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11884.

CVE-2017-11826 Alta · 7.8 KEV Alta · 62 Exploit público CWE-119 13/10/2017

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.

CVE-2017-8570 Alta · 7.8 KEV Urgente · 80 Exploit público 11/07/2017

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.

CVE-2017-8506 Alta · 7.8 14/06/2017