Microsoft Office XP vulnerabilities

2 CVEs affecting Microsoft Office XP, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1136, published 2009-07-15.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-1136, published 2009-07-15. High severity, CVSS 9.3. EPSS: 62% chance of exploitation in the next 30 days. The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components…
• CVE-2009-1533, published 2009-06-10. High severity, CVSS 9.3. EPSS: 35.6% chance of exploitation in the next 30 days. Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute…