Summary
| Detail | |||
|---|---|---|---|
| Vendor | Microsoft | First view | 2020-06-09 |
| Product | 365 Apps | Last view | 2022-06-15 |
| Version | - | Type | Application |
| Update | * | ||
| Edition | * | ||
| Language | * | ||
| Sofware Edition | enterprise | ||
| Target Software | * | ||
| Target Hardware | * | ||
| Other | * | ||
| CPE Product | cpe:2.3:a:microsoft:365_apps | ||
Activity : Overall
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 7.4 | 2022-06-15 | CVE-2022-30174 | Microsoft Office Remote Code Execution Vulnerability. |
| 7.8 | 2022-04-15 | CVE-2022-26901 | Microsoft Excel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24473. |
| 7.8 | 2022-04-15 | CVE-2022-24473 | Microsoft Excel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-26901. |
| 5.5 | 2022-03-09 | CVE-2022-24511 | Microsoft Office Word Tampering Vulnerability. |
| 7.8 | 2022-03-09 | CVE-2022-24510 | Microsoft Office Visio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24461, CVE-2022-24509. |
| 7.8 | 2022-03-09 | CVE-2022-24509 | Microsoft Office Visio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24461, CVE-2022-24510. |
| 5.5 | 2022-03-09 | CVE-2022-24462 | Microsoft Word Security Feature Bypass Vulnerability. |
| 7.8 | 2022-03-09 | CVE-2022-24461 | Microsoft Office Visio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24509, CVE-2022-24510. |
| 7.8 | 2022-02-09 | CVE-2022-21988 | Microsoft Office Visio Remote Code Execution Vulnerability. |
| 7.8 | 2021-11-10 | CVE-2021-42292 | Microsoft Excel Security Feature Bypass Vulnerability |
| 7.8 | 2021-11-10 | CVE-2021-41368 | Microsoft Access Remote Code Execution Vulnerability |
| 7.8 | 2021-11-10 | CVE-2021-40442 | Microsoft Excel Remote Code Execution Vulnerability |
| 7.8 | 2021-10-13 | CVE-2021-40485 | Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40471, CVE-2021-40473, CVE-2021-40474, CVE-2021-40479. |
| 7.8 | 2021-10-13 | CVE-2021-40481 | Microsoft Office Visio Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40480. |
| 7.8 | 2021-10-13 | CVE-2021-40480 | Microsoft Office Visio Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40481. |
| 7.8 | 2021-10-13 | CVE-2021-40479 | Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40471, CVE-2021-40473, CVE-2021-40474, CVE-2021-40485. |
| 7.8 | 2021-10-13 | CVE-2021-40474 | Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40471, CVE-2021-40473, CVE-2021-40479, CVE-2021-40485. |
| 7.8 | 2021-10-13 | CVE-2021-40473 | Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40471, CVE-2021-40474, CVE-2021-40479, CVE-2021-40485. |
| 5.5 | 2021-10-13 | CVE-2021-40472 | Microsoft Excel Information Disclosure Vulnerability |
| 7.8 | 2021-10-13 | CVE-2021-40471 | Microsoft Excel Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40473, CVE-2021-40474, CVE-2021-40479, CVE-2021-40485. |
| 7.8 | 2021-09-15 | CVE-2021-38659 | Microsoft Office Remote Code Execution Vulnerability |
| 5.5 | 2021-09-15 | CVE-2021-38657 | Microsoft Office Graphics Component Information Disclosure Vulnerability |
| 7.8 | 2021-09-15 | CVE-2021-38656 | Microsoft Word Remote Code Execution Vulnerability |
| 7.8 | 2021-09-15 | CVE-2021-38655 | Microsoft Excel Remote Code Execution Vulnerability |
| 7.8 | 2021-09-15 | CVE-2021-38654 | Microsoft Office Visio Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-38653. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 38% (10) | CWE-416 | Use After Free |
| 23% (6) | CWE-787 | Out-of-bounds Write |
| 15% (4) | CWE-125 | Out-of-bounds Read |
| 7% (2) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 3% (1) | CWE-426 | Untrusted Search Path |
| 3% (1) | CWE-401 | Failure to Release Memory Before Removing Last Reference ('Memory L... |
| 3% (1) | CWE-191 | Integer Underflow (Wrap or Wraparound) |
| 3% (1) | CWE-129 | Improper Validation of Array Index |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2020-12-01 | Microsoft Office Outlook email parsing remote code execution attempt RuleID : 56157 - Type : FILE-OFFICE - Revision : 1 |
| 2020-12-01 | Microsoft Office Outlook email parsing remote code execution attempt RuleID : 56156 - Type : FILE-OFFICE - Revision : 1 |
