Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (1271 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2006-0007 1 Microsoft 1 Office 2025-04-03 N/A
Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via a crafted GIF image that triggers memory corruption when it is parsed.
CVE-2006-0004 1 Microsoft 1 Office 2025-04-03 N/A
Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive information via a PowerPoint presentation that attempts to access objects in the Temporary Internet Files Folder (TIFF).
CVE-2006-0002 1 Microsoft 3 Exchange Server, Office, Outlook 2025-04-03 N/A
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
CVE-2006-0001 1 Microsoft 2 Office, Publisher 2025-04-03 N/A
Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.
CVE-2005-2127 2 Ati, Microsoft 6 Catalyst Driver, .net Framework, Office and 3 more 2025-04-03 N/A
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the "COM Object Instantiation Memory Corruption vulnerability."
CVE-2005-0820 1 Microsoft 1 Office Infopath 2025-04-03 N/A
Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to obtain printer and network information, obtain the database name, username, and password, or obtain the internal web server name.
CVE-2004-0848 1 Microsoft 6 Office, Powerpoint, Project and 3 more 2025-04-03 N/A
Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.
CVE-2022-37963 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-03-11 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-37962 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-03-11 7.8 High
Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2022-38010 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-03-11 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-33150 1 Microsoft 3 365 Apps, Office, Word 2025-02-28 9.6 Critical
Microsoft Office Security Feature Bypass Vulnerability
CVE-2023-33148 1 Microsoft 2 365 Apps, Office 2025-02-28 7.8 High
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-33131 1 Microsoft 4 Office, Office Long Term Servicing Channel, Outlook and 1 more 2025-02-28 8.8 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-23398 1 Microsoft 3 365 Apps, Excel, Office 2025-02-28 7.1 High
Microsoft Excel Spoofing Vulnerability
CVE-2022-41061 1 Microsoft 7 365 Apps, Office, Office Online Server and 4 more 2025-02-28 7.8 High
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-40485 1 Microsoft 7 365 Apps, Excel, Office and 4 more 2025-02-28 7.8 High
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-31949 1 Microsoft 3 365 Apps, Office, Outlook 2025-02-28 7.3 High
Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-21734 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-02-28 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-21735 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2025-02-28 7.8 High
Microsoft Office Remote Code Execution Vulnerability
CVE-2023-21737 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2025-02-28 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability