Product:

365_apps

(Microsoft)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 232
Date Id Summary Products Score Patch Annotated
2024-01-09 CVE-2024-20677 A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feature enabled will no longer have access to it. This includes Office 2019, Office 2021, Office LTSC for Mac 2021, and Microsoft 365. As of February 13, 2024, the ability to insert FBX files has also been disabled in 3D Viewer. 3D models... 365_apps, Office, Office_long_term_servicing_channel 7.8
2024-02-13 CVE-2024-21379 Microsoft Word Remote Code Execution Vulnerability 365_apps, Office, Office_long_term_servicing_channel, Word 7.8
2024-02-13 CVE-2024-21378 Microsoft Outlook Remote Code Execution Vulnerability 365_apps, Office, Office_long_term_servicing_channel, Outlook 8.8
2024-02-13 CVE-2024-21384 Microsoft Office OneNote Remote Code Execution Vulnerability 365_apps, Office_long_term_servicing_channel 7.8
2024-02-13 CVE-2024-21402 Microsoft Outlook Elevation of Privilege Vulnerability 365_apps 7.1
2024-02-13 CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability 365_apps, Office, Office_long_term_servicing_channel 9.8
2021-07-16 CVE-2021-34452 Microsoft Word Remote Code Execution Vulnerability 365_apps, Office, Word 7.8
2020-08-17 CVE-2020-1483 A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose... 365_apps, Office, Outlook 5.0
2020-08-17 CVE-2020-1493 An information disclosure vulnerability exists when attaching files to Outlook messages. This vulnerability could potentially allow users to share attached files such that they are accessible by anonymous users where they should be restricted to specific users. To exploit this vulnerability, an attacker would have to attach a file as a link to an email. The email could then be shared with individuals that should not have access to the files, ignoring the default organizational setting. The... 365_apps, Office, Outlook 5.5
2020-08-17 CVE-2020-1494 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users... 365_apps, Excel, Office 8.8