Microsoft Office 365 Proplus vulnerabilities

84 CVEs affecting Microsoft Office 365 Proplus, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-0991, published 2020-04-15.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-0541: Microsoft MSHTML Remote Code Execution Vulnerability, published 2019-01-08. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 53.2% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office,…
• CVE-2019-1297: Microsoft Excel Remote Code Execution Vulnerability, published 2019-09-11. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 21.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
• CVE-2019-1448, published 2019-11-12. High severity, CVSS 7.8. EPSS: 29.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
• CVE-2018-8587, published 2018-12-12. High severity, CVSS 7.8. EPSS: 28.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This…
• CVE-2019-0585, published 2019-01-08. High severity, CVSS 8.8. EPSS: 22% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects…
• CVE-2020-0653, published 2020-01-14. High severity, CVSS 7.8. EPSS: 20.5% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This…
• CVE-2018-8502, published 2018-10-10. High severity, CVSS 8.8. EPSS: 20.5% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code Execution…
• CVE-2019-1331, published 2019-10-10. High severity, CVSS 8.8. EPSS: 19.7% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This…
• CVE-2018-8504, published 2018-10-10. High severity, CVSS 8.8. EPSS: 19.7% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code Execution Vulnerability."…
• CVE-2018-8501, published 2018-10-10. High severity, CVSS 8.8. EPSS: 19.7% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint Remote Code Execution…

Latest

• CVE-2020-0991, published 2020-04-15. High severity, CVSS 7.8. EPSS: 11.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Remote Code Execution Vulnerability'.…
• CVE-2020-0980, published 2020-04-15. High severity, CVSS 7.8. EPSS: 11.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.
• CVE-2020-0979, published 2020-04-15. High severity, CVSS 8.8. EPSS: 11.5% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This…
• CVE-2020-0961, published 2020-04-15. High severity, CVSS 7.8. EPSS: 11.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code…
• CVE-2020-0906, published 2020-04-15. High severity, CVSS 8.8. EPSS: 11.5% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This…
• CVE-2020-0760, published 2020-04-15. High severity, CVSS 8.8. EPSS: 8.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from…
• CVE-2020-0892, published 2020-03-12. High severity, CVSS 7.8. EPSS: 11.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is…
• CVE-2020-0855, published 2020-03-12. High severity, CVSS 7.8. EPSS: 11.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is…
• CVE-2020-0851, published 2020-03-12. High severity, CVSS 7.8. EPSS: 11.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is…
• CVE-2020-0850, published 2020-03-12. High severity, CVSS 8.8. EPSS: 8.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is…