CVE-2013-5059: Microsoft Office Web Apps

Medium severity, CVSS 6.8. EPSS: 10.7% chance of exploitation in the next 30 days.

Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerabilities."

Affected products

• Microsoft Office Web Apps: version 2013 only
• Microsoft SharePoint Server: version 2010 only; version 2013 only

Published 2013-12-11. Last modified 2026-06-16.