Microsoft Office Web Apps vulnerabilities
8 vulnerabilities
Known vulnerabilities in Microsoft Office Web Apps, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-1442microsoftmicrosoft office online server+3
EPSS score1.73%
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.CVE-2020-1445microsoft365_apps+13EPSS score6.12%
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.CVE-2020-1342microsoft365_apps+14EPSS score6.41%
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.CVE-2020-1446microsoft365_apps+15EPSS score11.23%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.CVE-2020-1447microsoft365_apps+15EPSS score10.63%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.CVE-2020-1448microsoftmicrosoft office+12EPSS score9.96%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447.CVE-2020-0892microsoftmicrosoft office+14EPSS score11.83%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.CVE-2020-0980microsoftmicrosoft office+12EPSS score11.83%
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.