Microsoft Office Web Apps Server — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Office Web Apps Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (62)

• CVE-2015-6093 — CVSS 9.3 (critical): Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server…
• CVE-2014-0260 — CVSS 9.3 (critical): Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office Compatibility Pack SP3; Word Viewer; SharePoint Server 2010…
• CVE-2015-0085 — CVSS 9.3 (critical): Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010…
• CVE-2015-0086 — CVSS 9.3 (critical): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office…
• CVE-2015-1682 — CVSS 9.3 (critical): Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word…
• CVE-2014-0251 — CVSS 9.0 (critical): Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation…
• CVE-2017-8509 — CVSS 8.8 (high): A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office…
• CVE-2022-41106 — CVSS 8.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2019-0585 — CVSS 8.8 (high): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft…
• CVE-2017-8512 — CVSS 8.8 (high): A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office…
• CVE-2017-11826 — CVSS 7.8 (high) — actively exploited: Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013…
• CVE-2017-8511 — CVSS 7.8 (high): A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office…
• CVE-2017-8742 — CVSS 7.8 (high): A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2…
• CVE-2018-0797 — CVSS 7.8 (high): Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF…
• CVE-2023-23399 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2014-1761 — CVSS 7.8 (high) — actively exploited: Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011…
• CVE-2016-0022 — CVSS 7.8 (high): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac…
• CVE-2016-0052 — CVSS 7.8 (high): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac…
• CVE-2016-0053 — CVSS 7.8 (high): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word…
• CVE-2016-0127 — CVSS 7.8 (high): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office Compatibility Pack SP3, Word Viewer, Word…
• CVE-2016-0134 — CVSS 7.8 (high): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac…
• CVE-2016-3282 — CVSS 7.8 (high): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac…
• CVE-2016-3357 — CVSS 7.8 (high): Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word…
• CVE-2016-3360 — CVSS 7.8 (high): Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office…
• CVE-2021-28454 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2021-31175 — CVSS 7.8 (high): Microsoft Office Remote Code Execution Vulnerability
• CVE-2021-31176 — CVSS 7.8 (high): Microsoft Office Remote Code Execution Vulnerability
• CVE-2021-31177 — CVSS 7.8 (high): Microsoft Office Remote Code Execution Vulnerability
• CVE-2021-31179 — CVSS 7.8 (high): Microsoft Office Remote Code Execution Vulnerability
• CVE-2021-31939 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2021-34518 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2021-40442 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2021-40474 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2021-40486 — CVSS 7.8 (high): Microsoft Word Remote Code Execution Vulnerability
• CVE-2022-26901 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2022-29110 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2022-30173 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2022-41061 — CVSS 7.8 (high): Microsoft Word Remote Code Execution Vulnerability
• CVE-2022-41063 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2018-8577 — CVSS 7.8 (high): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
• CVE-2019-1201 — CVSS 7.8 (high): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who…
• CVE-2021-1713 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2021-1714 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2021-1715 — CVSS 7.8 (high): Microsoft Word Remote Code Execution Vulnerability
• CVE-2021-1716 — CVSS 7.8 (high): Microsoft Word Remote Code Execution Vulnerability
• CVE-2021-28451 — CVSS 7.8 (high): Microsoft Excel Remote Code Execution Vulnerability
• CVE-2021-28453 — CVSS 7.8 (high): Microsoft Word Remote Code Execution Vulnerability
• CVE-2016-0025 — CVSS 7.3 (high): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word…
• CVE-2023-23396 — CVSS 6.5 (medium): Microsoft Excel Denial of Service Vulnerability
• CVE-2022-41103 — CVSS 5.5 (medium): Microsoft Word Information Disclosure Vulnerability
• CVE-2021-31178 — CVSS 5.5 (medium): Microsoft Office Information Disclosure Vulnerability
• CVE-2022-30159 — CVSS 5.5 (medium): Microsoft Office Information Disclosure Vulnerability
• CVE-2022-30171 — CVSS 5.5 (medium): Microsoft Office Information Disclosure Vulnerability
• CVE-2019-0561 — CVSS 5.5 (medium): An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information…
• CVE-2022-41060 — CVSS 5.5 (medium): Microsoft Word Information Disclosure Vulnerability
• CVE-2021-28456 — CVSS 5.5 (medium): Microsoft Excel Information Disclosure Vulnerability
• CVE-2021-31174 — CVSS 5.5 (medium): Microsoft Excel Information Disclosure Vulnerability
• CVE-2022-30172 — CVSS 5.5 (medium): Microsoft Office Information Disclosure Vulnerability
• CVE-2021-40472 — CVSS 5.5 (medium): Microsoft Excel Information Disclosure Vulnerability
• CVE-2017-0195 — CVSS 5.4 (medium): Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010…
• CVE-2014-1754 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office…
• CVE-2018-0919 — CVSS 3.3 (low): Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps…