office 365 proplus · threatengine.sh

Home/Product/microsoft office 365 proplus

Product

microsoft office 365 proplus

84 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in me

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in me

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Offic

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully expl

A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in me

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsof

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects i

A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory,

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in

A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted fil

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A security feature bypass vulnerability exists when Microsoft Office improperly handles input, aka 'Microsoft Office Security Feat

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsof

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet D

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacke

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsof

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable c

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An att

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'M

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in me

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in me

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in me

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in me

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in me

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsof

A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerabi

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in me

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in me

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in me

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in me

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsof

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a spec

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "M

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet D

An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Informat

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microso

An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remo

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects i

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized var

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsof

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka

A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "M

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclo

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka

A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in mem

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "M

An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via

A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability.

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka

A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Prot

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Pro

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects i

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsof

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Micros

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin