Filtered by vendor Microsoft Subscriptions
Filtered by product Office Subscriptions
Total 1010 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2000-0088 1 Microsoft 4 Office, Office Converter Pack, Powerpoint and 1 more 2025-04-03 N/A
Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability.
CVE-2000-0419 1 Microsoft 10 Access, Excel, Frontpage and 7 more 2025-04-03 N/A
The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability.
CVE-1999-0794 1 Microsoft 2 Excel, Office 2025-04-03 N/A
Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
CVE-2006-1540 1 Microsoft 1 Office 2025-04-03 N/A
MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a malformed string, as demonstrated by replacing a certain "01 00 00 00" byte sequence with an "FF FF FF FF" byte sequence, possibly causing an invalid array index, in (1) an Excel .xls document, which triggers an access violation in ole32.dll; (2) an Excel .xlw document, which triggers an access violation in excel.exe; (3) a Word document, which triggers an access violation in mso.dll in winword.exe; and (4) a PowerPoint document, which triggers an access violation in powerpnt.txt. NOTE: after the initial disclosure, this issue was demonstrated by triggering an integer overflow using an inconsistent size for a Unicode "Sheet Name" string.
CVE-2002-0616 1 Microsoft 2 Excel, Office 2025-04-03 N/A
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability."
CVE-2004-0573 1 Microsoft 5 Frontpage, Office, Publisher and 2 more 2025-04-03 N/A
Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.
CVE-2004-0121 1 Microsoft 2 Office, Outlook 2025-04-03 N/A
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.
CVE-2022-37963 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-03-11 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-37962 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-03-11 7.8 High
Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2022-38010 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-03-11 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-33150 1 Microsoft 3 365 Apps, Office, Word 2025-03-01 9.6 Critical
Microsoft Office Security Feature Bypass Vulnerability
CVE-2023-33148 1 Microsoft 2 365 Apps, Office 2025-03-01 7.8 High
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-33131 1 Microsoft 4 Office, Office Long Term Servicing Channel, Outlook and 1 more 2025-03-01 8.8 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-23398 1 Microsoft 3 365 Apps, Excel, Office 2025-03-01 7.1 High
Microsoft Excel Spoofing Vulnerability
CVE-2022-41061 1 Microsoft 7 365 Apps, Office, Office Online Server and 4 more 2025-03-01 7.8 High
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-40485 1 Microsoft 7 365 Apps, Excel, Office and 4 more 2025-03-01 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-31949 1 Microsoft 3 365 Apps, Office, Outlook 2025-03-01 7.3 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-21734 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-03-01 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-21735 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-03-01 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-21737 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-03-01 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability