microsoft 365 apps vulnerabilities, newest first, page 19

By year: all 2026 2025 2024 2023 2022 2021

1. 7.8CVE-2021-1711EPSS 3.9%2021-01-12

   Microsoft Office Remote Code Execution Vulnerability

2. 6.5CVE-2020-17130EPSS 2.4%2020-12-10

   Microsoft Excel Security Feature Bypass Vulnerability

3. 7.8CVE-2020-17129EPSS 3.5%2020-12-10

   Microsoft Excel Remote Code Execution Vulnerability

4. 7.8CVE-2020-17128EPSS 2.7%2020-12-10

   Microsoft Excel Remote Code Execution Vulnerability

5. 5.5CVE-2020-17126EPSS 1.1%2020-12-10

   Microsoft Excel Information Disclosure Vulnerability

6. 7.8CVE-2020-17125EPSS 3.5%2020-12-10

   Microsoft Excel Remote Code Execution Vulnerability

7. 7.8CVE-2020-17124EPSS 3.5%2020-12-10

   Microsoft PowerPoint Remote Code Execution Vulnerability

8. 7.8CVE-2020-17123EPSS 3.6%2020-12-10

   Microsoft Excel Remote Code Execution Vulnerability

9. 6.5CVE-2020-17119EPSS 4.0%2020-12-10

   Microsoft Outlook Information Disclosure Vulnerability

10. 7.8CVE-2020-17067EPSS 3.3%2020-11-11

    Microsoft Excel Security Feature Bypass Vulnerability

11. 7.8CVE-2020-17065EPSS 4.1%2020-11-11

    Microsoft Excel Remote Code Execution Vulnerability

12. 7.8CVE-2020-17064EPSS 3.4%2020-11-11

    Microsoft Excel Remote Code Execution Vulnerability

13. 6.8CVE-2020-17063EPSS 1.6%2020-11-11

    Microsoft Office Online Spoofing Vulnerability

14. 7.8CVE-2020-17062EPSS 4.1%2020-11-11

    Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

15. 3.3CVE-2020-17020EPSS 1.3%2020-11-11

    Microsoft Word Security Feature Bypass Vulnerability

16. 7.8CVE-2020-16957EPSS 3.9%2020-10-16

    <p>A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim s…

17. 7.8CVE-2020-16955EPSS 3.5%2020-10-16

    <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this v…

18. 7.8CVE-2020-16954EPSS 3.3%2020-10-16

    <p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of …

19. 4.7CVE-2020-16949EPSS 3.0%2020-10-16

    <p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against…

20. 7.5CVE-2020-16947EPSS 34%2020-10-16

    <p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of…

21. 7.0CVE-2020-16934EPSS 2.7%2020-10-16

    <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this v…

22. 7.0CVE-2020-16933EPSS 2.7%2020-10-16

    <p>A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the…

23. 7.8CVE-2020-16932EPSS 4.8%2020-10-16

    <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of t…

24. 7.8CVE-2020-16931EPSS 4.8%2020-10-16

    <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of t…

25. 7.8CVE-2020-16930EPSS 4.7%2020-10-16

    <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of t…

26. 7.8CVE-2020-16929EPSS 3.7%2020-10-16

    <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of t…

27. 7.8CVE-2020-16928EPSS 3.4%2020-10-16

    <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this v…

28. 7.8CVE-2020-16918EPSS 3.9%2020-10-16

    <p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully exploited the vulnerability would gain execution on a victim system.</p> <p>The security update…

29. 7.8CVE-2020-1594EPSS 3.9%2020-09-11

    <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of t…

30. 7.8CVE-2020-1338EPSS 3.9%2020-09-11

    <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions i…

31. 7.8CVE-2020-1335EPSS 3.9%2020-09-11

    <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of t…

32. 7.8CVE-2020-1332EPSS 3.9%2020-09-11

    <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of t…

33. 5.5CVE-2020-1224EPSS 4.4%2020-09-11

    <p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p> <p…

34. 7.8CVE-2020-1218EPSS 3.8%2020-09-11

    <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions i…

35. 7.8CVE-2020-1193EPSS 3.8%2020-09-11

    <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of t…

36. 8.8CVE-2020-1583EPSS 4.9%2020-08-17

    An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit…

37. 7.8CVE-2020-1582EPSS 2.7%2020-08-17

    A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the…

38. 7.8CVE-2020-1581EPSS 3.7%2020-08-17

    An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would n…

39. 7.8CVE-2020-1563EPSS 3.2%2020-08-17

    A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the…

40. 5.5CVE-2020-1503EPSS 4.6%2020-08-17

    An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit…

41. 5.5CVE-2020-1502EPSS 4.6%2020-08-17

    An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit…

42. 8.8CVE-2020-1498EPSS 3.9%2020-08-17

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the …

43. 5.5CVE-2020-1497EPSS 4.6%2020-08-17

    An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploi…

44. 8.8CVE-2020-1496EPSS 4.2%2020-08-17

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the …

45. 8.8CVE-2020-1495EPSS 4.2%2020-08-17

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the …

46. 8.8CVE-2020-1494EPSS 4.2%2020-08-17

    A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the …

47. 5.5CVE-2020-1493EPSS 7.3%2020-08-17

    An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restric…

48. 5.0CVE-2020-1483EPSS 8.8%2020-08-17

    A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current…

49. 7.8CVE-2020-1458EPSS 11%2020-07-14

    A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'Microsoft Office Remote Code Execution Vulnerability'.

50. 7.8CVE-2020-1449EPSS 4.6%2020-07-14

    A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.