Microsoft Corporation Office

Name: Microsoft Corporation Office
Brand: Microsoft Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical9high5medium0low

updated 2026-10-27

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-0106US	high7.8	28.4% (98th)	Exploit	no fix	2017-04-12	≤ Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016
CVE-2017-0105US	medium5.5	30.4% (98th)	—	no fix	2017-03-17	≤ Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2
CVE-2017-0031US	high7.8	26.3% (98th)	—	no fix	2017-03-17	≤ Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2
CVE-2017-0030US	high7.8	26.0% (98th)	—	no fix	2017-03-17	≤ Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on SharePoint Server 2010 SP2
CVE-2017-0194US	medium5.5	25.5% (98th)	—	no fix	2017-04-12	≤ Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2
CVE-2017-0027US	medium4.7	22.6% (98th)	—	no fix	2017-03-17	≤ Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Server 2013 SP1
CVE-2017-0197US	high7.8	19.1% (97th)	—	no fix	2017-04-12	≤ OneNote 2007 SP3 and Microsoft OneNote 2010 SP2
CVE-2017-0053US	high7.8	16.7% (97th)	—	no fix	2017-03-17	≤ Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer
CVE-2017-0052US	high7.8	16.6% (97th)	—	no fix	2017-03-17	≤ Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3
CVE-2017-0019US	high7.8	16.6% (97th)	—	no fix	2017-03-17	≤ Word 2016
CVE-2017-0006US	high7.8	16.6% (97th)	—	no fix	2017-03-17	≤ Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3
CVE-2017-0020US	high7.8	16.4% (97th)	—	no fix	2017-03-17	≤ Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1
CVE-2017-0029US	medium5.5	15.6% (97th)	—	no fix	2017-03-17	≤ Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016
CVE-2017-0195US	medium5.4	3.84% (90th)	—	no fix	2017-04-12	≤ Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1, and Office Online Server

weaknesses (5)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer8 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)14 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan