Microsoft Groove vulnerabilities

3 CVEs affecting Microsoft Groove, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-1892, published 2011-09-15.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-1892, published 2011-09-15. Medium severity, CVSS 4.0. EPSS: 41.4% chance of exploitation in the next 30 days. Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove…
• CVE-2008-3068, published 2008-07-07. High severity, CVSS 7.5. EPSS: 17.4% chance of exploitation in the next 30 days. Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a…
• CVE-2010-3146, published 2010-08-27. High severity, CVSS 9.3. EPSS: 13.7% chance of exploitation in the next 30 days. Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.dll or (2) GroovePerfmon.dll file in the current working…