Search Results (1258 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-1446 1 Microsoft 8 365 Apps, Office, Office Online Server and 5 more 2024-11-21 8.8 High
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.
CVE-2020-1445 1 Microsoft 6 365 Apps, Office, Office Online Server and 3 more 2024-11-21 5.5 Medium
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.
CVE-2020-1442 1 Microsoft 2 Office Online Server, Office Web Apps 2024-11-21 6.1 Medium
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'.
CVE-2020-1349 1 Microsoft 3 365 Apps, Office, Outlook 2024-11-21 7.8 High
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.
CVE-2020-1342 1 Microsoft 7 365 Apps, Office, Office Online Server and 4 more 2024-11-21 5.5 Medium
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.
CVE-2020-1322 1 Microsoft 3 365 Apps, Office, Project 2024-11-21 6.5 Medium
An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'.
CVE-2020-1321 1 Microsoft 2 365 Apps, Office 2024-11-21 8.8 High
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'.
CVE-2020-1229 1 Microsoft 3 365 Apps, Office, Word 2024-11-21 4.3 Medium
A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.
CVE-2020-1226 1 Microsoft 3 365 Apps, Excel, Office 2024-11-21 8.8 High
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.
CVE-2020-1225 1 Microsoft 3 365 Apps, Excel, Office 2024-11-21 8.8 High
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.
CVE-2020-17067 1 Microsoft 3 365 Apps, Excel, Office 2024-11-21 7.8 High
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2020-17065 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2024-11-21 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17064 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2024-11-21 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-17063 1 Microsoft 2 365 Apps, Office 2024-11-21 6.8 Medium
Microsoft Office Online Spoofing Vulnerability
CVE-2020-17062 1 Microsoft 3 365 Apps, Excel, Office 2024-11-21 7.8 High
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVE-2020-17020 1 Microsoft 4 365 Apps, Excel, Office and 1 more 2024-11-21 3.3 Low
Microsoft Word Security Feature Bypass Vulnerability
CVE-2020-17019 1 Microsoft 2 Excel, Office 2024-11-21 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-15604 2 Microsoft, Trendmicro 6 Windows, Antivirus\+ 2019, Internet Security 2019 and 3 more 2024-11-21 7.5 High
An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into downloading a malicious update instead of the expected one. CWE-494: Update files are not properly verified.
CVE-2020-12695 22 Asus, Broadcom, Canon and 19 more 218 Rt-n11, Adsl, Selphy Cp1200 and 215 more 2024-11-21 7.5 High
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue.
CVE-2020-0991 1 Microsoft 2 Office, Office 365 Proplus 2024-11-21 7.8 High
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0760.