Microsoft Office 2010 vulnerabilities

5 CVEs affecting Microsoft Office 2010, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1028, published 2018-04-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-8682, published 2017-09-13. High severity, CVSS 8.8. EPSS: 49.8% chance of exploitation in the next 30 days. Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server…
CVE-2018-1028, published 2018-04-12. High severity, CVSS 8.8. EPSS: 18.9% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution…
CVE-2017-8696, published 2017-09-13. High severity, CVSS 7.5. EPSS: 14.3% chance of exploitation in the next 30 days. Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1;…
CVE-2017-8676, published 2017-09-13. Low severity, CVSS 3.3. EPSS: 14% chance of exploitation in the next 30 days. The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607,…
CVE-2017-8695, published 2017-09-13. Medium severity, CVSS 5.3. EPSS: 9.6% chance of exploitation in the next 30 days. Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016;…