Microsoft Microsoft Office Web Apps
8 CVEs affecting Microsoft Microsoft Office Web Apps. Latest disclosed: 2020-07-14. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-1448 | High | 8.8 | 2020-07-14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2020-1447 | High | 8.8 | 2020-07-14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2020-1446 | High | 8.8 | 2020-07-14 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2020-0980 | High | 7.8 | 2020-04-15 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2020-0892 | High | 7.8 | 2020-03-12 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Exe… |
CVE-2020-1442 | Medium | 6.1 | 2020-07-14 | A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'. |
CVE-2020-1445 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclos… |
CVE-2020-1342 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose… |