Microsoft Microsoft Word 2013 Service Pack 1

Name: Microsoft Microsoft Word 2013 Service Pack 1
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

1critical4high9medium2low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-36761US	medium6.5OT critical	19.6% (97th)	KEV	15.0.5589.1001	2023-09-12	15.0.1 → 15.0.5589.1001
CVE-2023-21716US	critical9.8	84.8% (100th)	Exploit	15.0.5529.1000	2023-02-14	15.0.1 → 15.0.5529.1000
CVE-2021-40486US	medium6.8	5.99% (93rd)	—	15.0.5389.1000	2021-10-13	15.0.1 → 15.0.5389.1000
CVE-2020-1583US	medium4.3	4.91% (92nd)	—	publication	2020-08-17	15.0.1 → publication
CVE-2019-1034US	high7.8	4.88% (92nd)	—	publication	2019-06-12	15.0.1 → publication
CVE-2019-1201US	high7.8	4.86% (92nd)	—	publication	2019-08-14	15.0.1 → publication
CVE-2020-1503US	medium5.5	4.55% (92nd)	—	publication	2020-08-17	15.0.1 → publication
CVE-2021-28453US	medium6.8	4.05% (91st)	—	publication	2021-04-13	15.0.1 → publication
CVE-2021-1716US	high9.3	3.89% (90th)	—	publication	2021-01-12	15.0.1 → publication
CVE-2021-1715US	high9.3	3.89% (90th)	—	publication	2021-01-12	15.0.1 → publication
CVE-2020-1218US	medium6.8	3.83% (90th)	—	publication	2020-09-11	15.0.1 → publication
CVE-2022-29107US	medium5.5	3.06% (88th)	—	15.0.5449.1000	2022-05-10	15.0.1 → 15.0.5449.1000
CVE-2020-16933US	medium6.8	2.74% (86th)	—	publication	2020-10-16	15.0.1 → publication
CVE-2021-31180US	medium6.8	2.34% (84th)	—	15.0.5345.1000	2021-05-11	15.0.1 → 15.0.5345.1000
CVE-2023-33150US	—	2.15% (82nd)	—	15.0.5571.1000	2023-07-11	15.0.1 → 15.0.5571.1000
CVE-2020-17020US	low2.1	1.26% (69th)	—	publication	2020-11-11	15.0.1 → publication
CVE-2022-41061US	—	1.21% (68th)	—	15.0.5501.1000	2022-11-09	15.0.1 → 15.0.5501.1000
CVE-2023-29335US	—	1.16% (67th)	—	15.0.5553.1000	2023-05-09	15.0.1 → 15.0.5553.1000
CVE-2022-24511US	low1.9	1.09% (65th)	—	15.0.5431.1000	2022-03-09	15.0.1 → 15.0.5431.1000
CVE-2023-36895US	—	1.05% (64th)	—	15.0.5579.1001	2023-08-08	15.0.1 → 15.0.5579.1001
CVE-2022-41103US	—	0.92% (60th)	—	15.0.5501.1000	2022-11-09	15.0.1 → 15.0.5501.1000
CVE-2022-41060US	—	0.79% (56th)	—	15.0.5501.1000	2022-11-09	15.0.1 → 15.0.5501.1000

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-254CWE-2544 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-416Use After Free1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan