Microsoft Office Vulnerabilidad

Cronología

El año pasado

Versión

2016215
2013 SP1180
2019166
2013 RT SP1156
2010 SP2153

Contramedidas

Official Fix551
Temporary Fix0
Workaround3
Unavailable2
Not Defined64

Explotabilidad

High29
Functional0
Proof-of-Concept129
Unproven150
Not Defined312

Vector de acceso

Not Defined0
Physical0
Local59
Adjacent8
Network553

Autenticación

Not Defined0
High2
Low39
None579

La interacción del usuario

Not Defined0
Required354
None266

C3BM Index

El año pasado

CVSSv3 Base

≤10
≤20
≤30
≤412
≤533
≤666
≤7174
≤8198
≤916
≤10121

CVSSv3 Temp

≤10
≤20
≤30
≤415
≤552
≤665
≤7274
≤890
≤954
≤1070

VulDB

≤10
≤20
≤30
≤418
≤556
≤629
≤7264
≤8117
≤914
≤10122

NVD

≤10
≤20
≤30
≤43
≤55
≤630
≤719
≤8151
≤933
≤104

CNA

≤10
≤20
≤30
≤42
≤53
≤613
≤77
≤836
≤93
≤101

Proveedor

≤10
≤20
≤30
≤43
≤53
≤622
≤713
≤8113
≤96
≤102

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k11
<10k82
<25k378
<50k135
<100k8
≥100k6

Explotar hoy

<1k499
<2k50
<5k47
<10k14
<25k10
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (54): 9, 10, 14.3, 14.3.1, 97, 98, 365 Apps, 365 Apps for Enterprise, 365 ProPlus, 2000, 2000 SP1, 2001, 2002, 2003, 2003 SP1, 2003 SP3, 2004, 2007, 2007 SP2, 2007 SP3, 2007 Sp1, 2008, 2010, 2010 SP, 2010 SP1, 2010 SP2, 2011, 2013, 2013 C2R, 2013 RT, 2013 RT SP1, 2013 SP1, 2016, 2016 C2R, 2016 for Mac, 2019, 2019 for Mac, 2021, LTSC, LTSC 2021, LTSC for Mac 2021, Office 365 Apps for Enterprise, Office 2003, Office Compatibility Pack SP3, Office for Mac 2011, Online Server, SP3, Sp3, Web Apps 2013 SP1, Web Apps Server 2003 SP1, Web Apps Server 2013 SP1, Word Viewer, XP, Xp

Link to Product Website: https://www.microsoft.com/

Tipo de software: Office Suite Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2024-04-097.06.7Microsoft Office LTSC/365 Apps for Enterprise Excel desbordamiento de búfer$5k-$25k$5k-$25kHighOfficial Fix0.04CVE-2024-26257
2024-02-139.08.3Microsoft Office Outlook Remote Code Execution$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.05CVE-2024-21413
2024-02-137.36.7Microsoft Office OneNote Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.05CVE-2024-21384
2024-02-137.36.7Microsoft Office/Word Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.09CVE-2024-21379
2024-02-137.36.7Microsoft Excel/Office/PowerPoint/Publisher/Visio/Word/Skype Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.05CVE-2024-20673
2024-01-097.36.7Microsoft Office/365 Apps for Enterprise Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.04CVE-2024-20677
2023-12-125.14.7Microsoft Office Word divulgación de información$5k-$25k$0-$5kUnprovenOfficial Fix0.02CVE-2023-36009
2023-12-125.85.3Microsoft Office/365 Apps for Enterprise divulgación de información$5k-$25k$0-$5kUnprovenOfficial Fix0.05CVE-2023-35636
2023-12-125.34.8Microsoft Office LTSC vulnerabilidad desconocida$5k-$25k$0-$5kUnprovenOfficial Fix0.02CVE-2023-35619
2023-11-145.85.3Microsoft Office vulnerabilidad desconocida$5k-$25k$0-$5kUnprovenOfficial Fix0.04CVE-2023-36413
2023-11-147.36.7Microsoft Office/365 Apps for Enterprise Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.02CVE-2023-36045
2023-11-074.54.5Microsoft Office/Office LTSC/OneNote vulnerabilidad desconocida$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-36769
2023-10-108.27.5Microsoft Office Local Privilege Escalation$5k-$25k$0-$5kUnprovenOfficial Fix0.03CVE-2023-36569
2023-10-107.06.4Microsoft Office Click-To-Run Local Privilege Escalation$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2023-36568
2023-10-106.25.7Microsoft Office Graphics Local Privilege Escalation$0-$5k$0-$5kUnprovenOfficial Fix0.00CVE-2023-36565
2023-09-125.14.7Microsoft Office vulnerabilidad desconocida$5k-$25k$0-$5kUnprovenOfficial Fix0.02CVE-2023-41764
2023-09-124.34.0Microsoft Office denegación de servicio$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2023-36767
2023-09-128.37.8Microsoft Excel Local Privilege Escalation$5k-$25k$0-$5kUnprovenOfficial Fix0.04CVE-2023-36765
2023-08-087.26.9Microsoft Visual Studio/Office/365 Apps for Enterprise Remote Code Execution$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.07CVE-2023-36897
2023-08-085.85.3Microsoft Office Outlook divulgación de información$5k-$25k$0-$5kUnprovenOfficial Fix0.03CVE-2023-36893
2023-08-087.36.7Microsoft Office Excel Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2023-36896
2023-08-088.17.4Microsoft Office Outlook Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2023-36895
2023-08-088.17.4Microsoft Office Visio Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.04CVE-2023-35372
2023-08-088.17.4Microsoft Office Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2023-35371
2023-08-087.36.7Microsoft Office Visio Remote Code Execution$5k-$25k$0-$5kUnprovenOfficial Fix0.02CVE-2023-36866

595 no se muestran más entradas

más entradas por Microsoft

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!