# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
1 |
CVE-2019-1296 |
20 |
|
Exec Code |
2019-09-11 |
2019-09-12 |
6.5 |
None |
Remote |
Low |
Single system |
Partial |
Partial |
Partial |
A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1257, CVE-2019-1295. |
2 |
CVE-2019-1295 |
20 |
|
Exec Code |
2019-09-11 |
2019-09-12 |
6.5 |
None |
Remote |
Low |
Single system |
Partial |
Partial |
Partial |
A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1257, CVE-2019-1296. |
3 |
CVE-2019-1261 |
352 |
|
CSRF |
2019-09-11 |
2019-09-12 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an attacker would need to create a page specifically designed to cause a cross-site request, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1259. |
4 |
CVE-2019-1260 |
269 |
|
|
2019-09-11 |
2019-09-12 |
4.0 |
None |
Remote |
Low |
Single system |
None |
Partial |
None |
An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. |
5 |
CVE-2019-1257 |
20 |
|
Exec Code |
2019-09-11 |
2019-09-12 |
6.5 |
None |
Remote |
Low |
Single system |
Partial |
Partial |
Partial |
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1295, CVE-2019-1296. |
6 |
CVE-2019-1205 |
119 |
|
Exec Code Overflow |
2019-08-14 |
2019-08-20 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1201. |
7 |
CVE-2019-1203 |
79 |
|
XSS |
2019-08-14 |
2019-08-20 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. |
8 |
CVE-2019-1202 |
200 |
|
+Info |
2019-08-14 |
2019-08-20 |
3.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
None |
An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects, aka 'Microsoft SharePoint Information Disclosure Vulnerability'. |
9 |
CVE-2019-1201 |
119 |
|
Exec Code Overflow |
2019-08-14 |
2019-08-20 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1205. |
10 |
CVE-2019-1134 |
79 |
|
XSS |
2019-07-15 |
2019-07-19 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. |
11 |
CVE-2019-1036 |
79 |
|
XSS |
2019-06-12 |
2019-06-13 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1031, CVE-2019-1032, CVE-2019-1033. |
12 |
CVE-2019-1035 |
119 |
|
Exec Code Overflow |
2019-06-12 |
2019-06-14 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1034. |
13 |
CVE-2019-1034 |
119 |
|
Exec Code Overflow |
2019-06-12 |
2019-06-13 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1035. |
14 |
CVE-2019-1033 |
79 |
|
XSS |
2019-06-12 |
2019-06-13 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1031, CVE-2019-1032, CVE-2019-1036. |
15 |
CVE-2019-1032 |
79 |
|
XSS |
2019-06-12 |
2019-06-13 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1031, CVE-2019-1033, CVE-2019-1036. |
16 |
CVE-2019-1031 |
79 |
|
XSS |
2019-06-12 |
2019-06-13 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-1032, CVE-2019-1033, CVE-2019-1036. |
17 |
CVE-2019-1006 |
287 |
|
Bypass |
2019-07-15 |
2019-07-19 |
5.0 |
None |
Remote |
Low |
Not required |
None |
Partial |
None |
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'. |
18 |
CVE-2019-0958 |
264 |
|
|
2019-05-16 |
2019-05-17 |
6.5 |
None |
Remote |
Low |
Single system |
Partial |
Partial |
Partial |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957. |
19 |
CVE-2019-0957 |
264 |
|
|
2019-05-16 |
2019-05-17 |
6.5 |
None |
Remote |
Low |
Single system |
Partial |
Partial |
Partial |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0958. |
20 |
CVE-2019-0950 |
20 |
|
|
2019-05-16 |
2019-05-20 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0951. |
21 |
CVE-2019-0949 |
20 |
|
|
2019-05-16 |
2019-05-20 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0950, CVE-2019-0951. |
22 |
CVE-2019-0831 |
79 |
|
XSS |
2019-04-09 |
2019-04-10 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830. |
23 |
CVE-2019-0830 |
79 |
|
XSS |
2019-04-09 |
2019-04-10 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0831. |
24 |
CVE-2019-0604 |
20 |
|
Exec Code |
2019-03-05 |
2019-06-10 |
6.5 |
None |
Remote |
Low |
Single system |
Partial |
Partial |
Partial |
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0594. |
25 |
CVE-2019-0594 |
20 |
|
Exec Code |
2019-03-05 |
2019-06-10 |
6.5 |
None |
Remote |
Low |
Single system |
Partial |
Partial |
Partial |
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0604. |
26 |
CVE-2019-0585 |
20 |
|
Exec Code |
2019-01-08 |
2019-01-15 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server. |
27 |
CVE-2019-0561 |
200 |
|
+Info |
2019-01-08 |
2019-01-14 |
4.3 |
None |
Remote |
Medium |
Not required |
Partial |
None |
None |
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word. |
28 |
CVE-2019-0558 |
79 |
|
XSS |
2019-01-08 |
2019-01-15 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint, Microsoft Business Productivity Servers. This CVE ID is unique from CVE-2019-0556, CVE-2019-0557. |
29 |
CVE-2019-0557 |
79 |
|
XSS |
2019-01-08 |
2019-01-15 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0556, CVE-2019-0558. |
30 |
CVE-2019-0556 |
79 |
|
XSS |
2019-01-08 |
2019-01-15 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2019-0557, CVE-2019-0558. |
31 |
CVE-2018-8635 |
20 |
|
|
2018-12-11 |
2019-10-02 |
6.5 |
None |
Remote |
Low |
Single system |
Partial |
Partial |
Partial |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka "Microsoft SharePoint Server Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. |
32 |
CVE-2018-8628 |
119 |
|
Exec Code Overflow |
2018-12-11 |
2019-01-03 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server, Microsoft SharePoint Server. |
33 |
CVE-2018-8627 |
200 |
|
+Info |
2018-12-11 |
2019-01-03 |
4.3 |
None |
Remote |
Medium |
Not required |
Partial |
None |
None |
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8598. |
34 |
CVE-2018-8572 |
79 |
|
XSS |
2018-11-13 |
2019-10-02 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8568. |
35 |
CVE-2018-8568 |
79 |
|
XSS |
2018-11-13 |
2019-10-02 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8572. |
36 |
CVE-2018-8539 |
119 |
|
Exec Code Overflow |
2018-11-13 |
2018-12-14 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Microsoft Office. This CVE ID is unique from CVE-2018-8573. |
37 |
CVE-2018-8504 |
|
|
Exec Code |
2018-10-10 |
2019-10-02 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Office 365 ProPlus, Microsoft Office, Microsoft Word. |
38 |
CVE-2018-8431 |
79 |
|
XSS |
2018-09-12 |
2019-10-02 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8428. |
39 |
CVE-2018-8378 |
200 |
|
+Info |
2018-08-15 |
2018-10-15 |
4.3 |
None |
Remote |
Medium |
Not required |
Partial |
None |
None |
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft SharePoint Server, Microsoft Office Word Viewer, Microsoft Excel Viewer, Microsoft SharePoint, Microsoft Office. |
40 |
CVE-2018-8284 |
20 |
|
Exec Code |
2018-07-10 |
2018-09-07 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2. |
41 |
CVE-2018-8254 |
79 |
|
XSS |
2018-06-14 |
2018-08-06 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8252. |
42 |
CVE-2018-8252 |
79 |
|
XSS |
2018-06-14 |
2018-08-06 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8254. |
43 |
CVE-2018-8168 |
79 |
|
XSS |
2018-05-09 |
2018-06-05 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8149, CVE-2018-8155, CVE-2018-8156. |
44 |
CVE-2018-8161 |
119 |
|
Exec Code Overflow |
2018-05-09 |
2018-06-05 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Word, Word, Microsoft Office, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8157, CVE-2018-8158. |
45 |
CVE-2018-8160 |
200 |
|
+Info |
2018-05-09 |
2018-06-06 |
4.3 |
None |
Remote |
Medium |
Not required |
Partial |
None |
None |
An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Word, Microsoft Office. |
46 |
CVE-2018-8156 |
79 |
|
XSS |
2018-05-09 |
2018-06-05 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint, Microsoft Project Server. This CVE ID is unique from CVE-2018-8149, CVE-2018-8155, CVE-2018-8168. |
47 |
CVE-2018-8155 |
79 |
|
XSS |
2018-05-09 |
2018-06-05 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8149, CVE-2018-8156, CVE-2018-8168. |
48 |
CVE-2018-8149 |
79 |
|
XSS |
2018-05-09 |
2018-06-05 |
3.5 |
None |
Remote |
Medium |
Single system |
None |
Partial |
None |
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8155, CVE-2018-8156, CVE-2018-8168. |
49 |
CVE-2018-0922 |
119 |
|
Exec Code Overflow Mem. Corr. |
2018-03-14 |
2018-04-13 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft Office Word Viewer, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Compatibility Pack SP2, Microsoft Online Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2007 SP3, Microsoft Word 2010 SP2, Word 2013 and Microsoft Word 2016 allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". |
50 |
CVE-2018-0919 |
200 |
|
+Info |
2018-03-14 |
2018-04-09 |
4.3 |
None |
Remote |
Medium |
Not required |
Partial |
None |
None |
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2010 SP2, Word 2013 SP1 and Microsoft Word 2016 allow an information disclosure vulnerability due to how variables are initialized, aka "Microsoft Office Information Disclosure Vulnerability". |