Microsoft Office 2013 Rt vulnerabilities

3 CVEs affecting Microsoft Office 2013 Rt, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-5054, published 2013-12-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-1324, published 2013-11-13. High severity, CVSS 9.3. EPSS: 31.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd)…
CVE-2013-3889, published 2013-10-09. High severity, CVSS 9.3. EPSS: 27.4% chance of exploitation in the next 30 days. Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel…
CVE-2013-5054, published 2013-12-11. Medium severity, CVSS 4.3. EPSS: 12.8% chance of exploitation in the next 30 days. Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in…