Microsoft Office For Mac vulnerabilities

10 CVEs affecting Microsoft Office For Mac, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-8429, published 2018-09-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-7276, published 2016-12-20. High severity, CVSS 7.1. EPSS: 25.1% chance of exploitation in the next 30 days. Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial…
CVE-2018-8162, published 2018-05-09. High severity, CVSS 7.8. EPSS: 24.7% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This…
CVE-2018-8148, published 2018-05-09. High severity, CVSS 7.8. EPSS: 24.7% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This…
CVE-2018-8147, published 2018-05-09. High severity, CVSS 7.8. EPSS: 24.7% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This…
CVE-2018-8176, published 2018-05-23. High severity, CVSS 8.8. EPSS: 23.6% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability."…
CVE-2017-11825, published 2017-10-13. High severity, CVSS 7.8. EPSS: 22.9% chance of exploitation in the next 30 days. Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how…
CVE-2016-7257, published 2016-12-20. Medium severity, CVSS 6.5. EPSS: 22.5% chance of exploitation in the next 30 days. The GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office for Mac 2011, and Office 2016 for Mac allows remote attackers to obtain sensitive…
CVE-2018-8332, published 2018-09-13. High severity, CVSS 8.8. EPSS: 19.1% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects…
CVE-2018-8429, published 2018-09-13. Medium severity, CVSS 5.5. EPSS: 12.3% chance of exploitation in the next 30 days. An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft…
CVE-2018-8412, published 2018-08-15. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka "Microsoft (MAU) Office Elevation of…