Microsoft Publisher
43 CVEs affecting Microsoft Publisher. Latest disclosed: 2024-09-10. Critical: 0, High: 9.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0760 | High | 8.8 | 2020-04-15 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulne… |
CVE-2007-0671 | High | 8.8 | 2007-02-03 | Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to exe… |
CVE-2024-20673 | High | 7.8 | 2024-02-13 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-28295 | High | 7.8 | 2023-06-17 | Microsoft Publisher Remote Code Execution Vulnerability |
CVE-2023-28287 | High | 7.8 | 2023-06-17 | Microsoft Publisher Remote Code Execution Vulnerability |
CVE-2018-8245 | High | 7.8 | 2018-06-14 | A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE ob… |
CVE-2017-8725 | High | 7.8 | 2017-09-13 | A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly… |
CVE-2016-7289 | High | 7.8 | 2016-12-20 | Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Mi… |
CVE-2024-38226 | High | 7.3 | 2024-09-10 | Microsoft Publisher Security Feature Bypass Vulnerability |
CVE-2022-29107 | Medium | 5.5 | 2022-05-10 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2015-2503 | | 2015-11-11 | Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word… | |
CVE-2014-1759 | | 2014-04-08 | pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dere… | |
CVE-2013-1329 | | 2013-05-15 | Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer… | |
CVE-2013-1328 | | 2013-05-15 | Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect poi… | |
CVE-2013-1327 | | 2013-05-15 | Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improp… | |
CVE-2013-1323 | | 2013-05-15 | Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a cra… | |
CVE-2013-1322 | | 2013-05-15 | Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, ak… | |
CVE-2013-1321 | | 2013-05-15 | Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via… | |
CVE-2013-1320 | | 2013-05-15 | Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow… | |
CVE-2013-1319 | | 2013-05-15 | Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a c… |