Microsoft
Microsoft Office WEB Apps: vulnerabilidades y CVE
Microsoft Office WEB Apps tiene 106 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 3 figuran en el catálogo de explotación activa de CISA.
CVE106
Últimos 12 meses0
Críticas1
Explotadas activamente3
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2012-2539 | Alta (7.8) | 53% | ⚠ Explotación activa | 12 dic 2012 | Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service… |
| CVE-2014-1761 | Alta (7.8) | 77% | ⚠ Explotación activa | 25 mar 2014 | Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office… |
| CVE-2015-1641 | Alta (7.8) | 97% | ⚠ Explotación activa | 14 abr 2015 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-21716 | Crítica (9.8) | 85% | — | 14 feb 2023 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2022-22716 | Media (5.5) | 4.6% | — | 9 feb 2022 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2022-21840 | Alta (8.8) | 3.1% | — | 11 ene 2022 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2021-43256 | Alta (7.8) | 2.1% | — | 15 dic 2021 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2021-38655 | Alta (7.8) | 6.3% | — | 15 sept 2021 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2021-28453 | Alta (7.8) | 4.1% | — | 13 abr 2021 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2021-27057 | Alta (7.8) | 4.3% | — | 11 mar 2021 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2021-27054 | Alta (7.8) | 4.3% | — | 11 mar 2021 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2021-27053 | Alta (7.8) | 4.6% | — | 11 mar 2021 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2021-24070 | Alta (7.8) | 2.5% | — | 25 feb 2021 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2021-24069 | Alta (7.8) | 2.5% | — | 25 feb 2021 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2021-24068 | Alta (7.8) | 2.5% | — | 25 feb 2021 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2021-24067 | Alta (7.8) | 2.5% | — | 25 feb 2021 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2021-1716 | Alta (7.8) | 3.6% | — | 12 ene 2021 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2021-1715 | Alta (7.8) | 3.6% | — | 12 ene 2021 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2020-17129 | Alta (7.8) | 3.5% | — | 10 dic 2020 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2020-17128 | Alta (7.8) | 2.7% | — | 10 dic 2020 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2020-17126 | Media (5.5) | 1.1% | — | 10 dic 2020 | Microsoft Excel Information Disclosure Vulnerability |
| CVE-2020-17125 | Alta (7.8) | 3.5% | — | 10 dic 2020 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2020-17123 | Alta (7.8) | 3.6% | — | 10 dic 2020 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2020-17122 | Alta (7.8) | 3.5% | — | 10 dic 2020 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2020-17065 | Alta (7.8) | 4.1% | — | 11 nov 2020 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2020-17064 | Alta (7.8) | 3.4% | — | 11 nov 2020 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2020-16932 | Alta (7.8) | 4.8% | — | 16 oct 2020 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code… |
| CVE-2020-16931 | Alta (7.8) | 4.8% | — | 16 oct 2020 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code… |
| CVE-2020-16929 | Alta (7.8) | 3.7% | — | 16 oct 2020 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code… |
| CVE-2020-1335 | Alta (8.8) | 3.9% | — | 11 sept 2020 | <p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code… |
| CVE-2020-1224 | Media (5.5) | 4.4% | — | 11 sept 2020 | <p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s… |
| CVE-2020-1218 | Alta (8.8) | 3.8% | — | 11 sept 2020 | <p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file… |
| CVE-2020-1583 | Media (5.5) | 4.9% | — | 17 ago 2020 | An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.