7.7
CVSS
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
Severity: HIGH
📦
office
Vendor: microsoft
Actively Exploited
36
CISA KEV List
PoC / Exploits
121
Code Available
Total RCEs
472
Remote Access
Total CVEs
9995
Total Indexed
Avg. EPSS
26.42%
Exploit Prob.
Security Vulnerability Index
Page 1 / 1000
7.8
CVSS
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Severity: HIGH
4.3
CVSS
Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Severity: MEDIUM
8.8
CVSS
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
Severity: HIGH
7.8
CVSS
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.
Severity: HIGH
8.4
CVSS
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Severity: HIGH
8.4
CVSS
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Severity: HIGH
8.4
CVSS
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Severity: HIGH
8.4
CVSS
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
Severity: HIGH