Microsoft Corporation Microsoft Office

Name: Microsoft Corporation Microsoft Office
Brand: Microsoft Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical35high8medium2low

updated 2026-10-27

vulnerabilities (45)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-11882US	high7.8OT critical	99.9% (100th)	KEV	no fix	2017-11-15	≤ Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016
CVE-2017-11826US	high7.8OT critical	81.3% (100th)	KEV	no fix	2017-10-13	≤ Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, Office Online Server.
CVE-2017-0261US	high7.8OT critical	78.1% (100th)	KEV	no fix	2017-05-12	≤ Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016
CVE-2017-0262US	high7.8OT critical	81.0% (100th)	KEV	no fix	2017-05-12	≤ Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016
CVE-2018-0797US	high7.8	24.7% (98th)	—	no fix	2018-01-10	≤ Microsoft Office
CVE-2017-8506US	high7.8	24.2% (98th)	—	no fix	2017-06-15	≤ Microsoft Outlook 2010 Service Pack 2, Microsoft Outlook 2013 RT Service Pack 1, Microsoft Outlook 2013 Service Pack 1, and Microsoft Outlook 2016.
CVE-2017-8512US	high8.8	22.1% (98th)	—	no fix	2017-06-15	≤ Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016, Microsoft Office Online Server 2016, Microsoft Office Web Apps 2010 Service Pack 2, Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, and Word Automation Services.
CVE-2017-8510US	high8.8	22.1% (98th)	—	no fix	2017-06-15	≤ Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1,and Microsoft Office 2016 (64-bit edition).
CVE-2017-8743US	high7.8	22.1% (98th)	—	no fix	2017-09-13	≤ Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server
CVE-2017-8742US	high7.8	22.1% (98th)	—	no fix	2017-09-13	≤ Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft SharePoint Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Web Apps 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3
CVE-2017-8630US	high7.8	21.0% (98th)	—	no fix	2017-09-13	≤ Microsoft Office 2016
CVE-2017-8511US	high7.8	20.6% (98th)	—	no fix	2017-06-15	≤ Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016, Microsoft Office Online Server 2016, Microsoft Office Web Apps Server 2010 Service Pack 2, Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016 for Mac, Microsoft PowerPoint for Mac 2011, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, and Microsoft SharePoint Enterprise Server 2016.
CVE-2017-8725US	high7.8	20.3% (97th)	—	no fix	2017-09-13	≤ Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2
CVE-2017-8567US	high7.8	20.3% (97th)	—	no fix	2017-09-13	≤ Microsoft Excel for Mac 2011
CVE-2017-8663US	high7.8	20.1% (97th)	—	no fix	2017-08-01	≤ Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016.
CVE-2018-0841US	high8.8	20.1% (97th)	—	no fix	2018-02-15	≤ Microsoft Office 2016 Click-to-Run
CVE-2017-0260US	high7.8	19.9% (97th)	—	no fix	2017-06-15	≤ Microsoft Office 2013 Service Pack 1 Click-to-Run (C2R), Microsoft Office 2016 Click-to-Run (C2R), Windows 7, Windows Server 2008 and Windows Server 2008 R2.
CVE-2017-0254US	high7.8	19.8% (97th)	—	no fix	2017-05-12	≤ Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, Word 2013 RT SP1, Word 2013 SP1, Word Automation Services on Microsoft SharePoint Server 2013 SP1, Office Word Viewer, SharePoint Enterprise Server 2016, and Word 2016.
CVE-2017-8507US	high7.8	19.6% (97th)	—	no fix	2017-06-15	≤ Microsoft Outlook 2007 Service Pack 3, Microsoft Outlook 2010 Service Pack 2, Microsoft Outlook 2013 RT Service Pack 1, Microsoft Outlook 2013 Service Pack 1, and Microsoft Outlook 2016.
CVE-2018-0852US	high8.8	19.4% (97th)	—	no fix	2018-02-15	≤ Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R).
CVE-2018-0795US	high8.8	19.3% (97th)	—	no fix	2018-01-10	≤ Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016
CVE-2018-0851US	high8.8	19.1% (97th)	—	no fix	2018-02-15	≤ Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R).
CVE-2017-11935US	high7.8	18.9% (97th)	—	no fix	2017-12-12	≤ Microsoft Office 2016 Click-to-Run (C2R)
CVE-2017-0265US	high7.8	18.6% (97th)	—	no fix	2017-05-12	≤ Microsoft PowerPoint for Mac 2011
CVE-2017-8509US	high8.8	18.2% (97th)	—	no fix	2017-06-15	≤ Microsoft Office 2007 Service Pack 3, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Word 2007, Microsoft Office 2010 Service Pack 2, Microsoft Word 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016, Microsoft Office Web Apps 2010 Service Pack 2, Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft Word 2013 RT Service Pack 1, Microsoft OneNote 2010 Service Pack 2, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, and Microsoft Word 2016
CVE-2018-0922US	high7.8	18.0% (97th)	—	no fix	2018-03-14	≤ Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft Office Word Viewer, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Compatibility Pack SP2, Microsoft Online Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2007 SP3, Microsoft Word 2010 SP2, Word 2013 and Microsoft Word 2016
CVE-2017-8744US	high7.8	17.9% (97th)	—	no fix	2017-09-13	≤ Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, and Microsoft Excel 2016
CVE-2017-8632US	high7.8	17.7% (97th)	—	no fix	2017-09-13	≤ Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Excel for Mac 2011, Microsoft Excel 2016 for Mac, and Microsoft Office Compatibility Pack Service Pack 3
CVE-2017-8631US	high7.8	17.0% (97th)	—	no fix	2017-09-13	≤ Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Web App 2013 Service Pack 1, Microsoft Excel Viewer 2007 Service Pack 3, and Office Online Server
CVE-2017-0281US	high7.8	15.8% (97th)	—	no fix	2017-05-12	≤ Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word 2016, and Skype for Business 2016.
CVE-2017-0264US	high7.8	13.9% (97th)	—	no fix	2017-05-12	≤ Microsoft PowerPoint for Mac 2011
CVE-2017-11934US	medium5.5	12.6% (96th)	—	no fix	2017-12-12	≤ Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016
CVE-2017-8572US	medium5.5	12.6% (96th)	—	no fix	2017-08-01	≤ Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016.
CVE-2018-0853US	low3.3	11.8% (96th)	—	no fix	2018-02-15	≤ Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R).
CVE-2018-0919US	low3.3	11.7% (96th)	—	no fix	2018-03-14	≤ Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2010 SP2, Word 2013 SP1 and Microsoft Word 2016
CVE-2017-11884US	high7.8	9.45% (95th)	—	no fix	2017-11-15	≤ Microsoft Excel 2016 Click-to-Run (C2R)
CVE-2017-11854US	high8.8	8.36% (95th)	—	no fix	2017-11-15	≤ Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3
CVE-2017-11939US	medium6.5	6.28% (94th)	—	no fix	2017-12-12	≤ Microsoft Office 2016 Click-to-Run (C2R)
CVE-2017-11878US	high7.8	6.17% (93rd)	—	no fix	2017-11-15	≤ Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3
CVE-2017-8571US	high7.8	5.78% (93rd)	—	no fix	2017-08-01	≤ Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016.
CVE-2017-11877US	medium5.5	4.55% (92nd)	—	no fix	2017-11-15	≤ Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Viewer 2007 Service Pack 3, and Microsoft Excel 2016 for Mac
CVE-2017-8508US	medium5.5	4.19% (91st)	—	no fix	2017-06-15	≤ Microsoft Outlook 2007 Service Pack 3, Microsoft Outlook 2010 Service Pack 2, Microsoft Outlook 2013 RT Service Pack 1, Microsoft Outlook 2013 Service Pack 1, and Microsoft Outlook 2016.
CVE-2017-8654US	medium5.4	2.15% (82nd)	—	no fix	2017-08-08	≤ Microsoft SharePoint Server 2010 Service Pack 2
CVE-2017-8745US	medium5.4	1.75% (78th)	—	no fix	2017-09-13	≤ Microsoft SharePoint Foundation 2013 Service Pack 1
CVE-2017-0255US	medium5.4	1.68% (77th)	—	no fix	2017-05-12	≤ Microsoft SharePoint Foundation 2013 SP1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer24 CVEs
CWE-19CWE-196 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-125Out-of-bounds Read1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)45 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan