Vulnerabilities in Microsoft Corporation
865 resultsCVE-2017-8511—A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office REPSS 20.6%CVE-2018-0791—Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, and Microsoft Outlook 2016 allow a remote code execution vulnerabiliEPSS 20.6%CVE-2018-0793—Microsoft Outlook 2007, Microsoft Outlook 2010 and Microsoft Outlook 2013 allow a remote code execution vulnerability due to the way email mEPSS 20.6%CVE-2017-11940—The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,EPSS 20.5%CVE-2017-8463—Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10EPSS 20.5%CVE-2017-0291—Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 alloEPSS 20.5%CVE-2018-0848—Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allEPSS 20.5%CVE-2017-8461—Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPEPSS 20.4%CVE-2017-8567—A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory, aka "MicrosEPSS 20.3%CVE-2017-8725—A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when theEPSS 20.3%CVE-2017-8663—Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allowsEPSS 20.1%CVE-2018-0794—Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code executEPSS 20.1%CVE-2018-0841—Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office RemoteEPSS 20.1%CVE-2017-8658—A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "ScriEPSS 20.1%CVE-2017-11816—The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows SEPSS 20.0%CVE-2017-0260—A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office REPSS 19.9%CVE-2017-8528—Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 GolEPSS 19.9%CVE-2017-0254—Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft OffiEPSS 19.8%CVE-2017-8691—Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font liEPSS 19.8%CVE-2018-0845—Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allEPSS 19.7%