Microsoft Publisher vulnerabilities

45 CVEs affecting Microsoft Publisher, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-81385, published 2026-09-08.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-0671: Microsoft Office Excel Remote Code Execution Vulnerability, published 2007-02-03. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-08-12. EPSS: 43.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack…
• CVE-2024-38226: Microsoft Publisher Protection Mechanism Failure Vulnerability, published 2024-09-10. High severity, CVSS 7.3. Actively exploited: in CISA KEV since 2024-09-10. EPSS: 2.7% chance of exploitation in the next 30 days. Microsoft Publisher Security Feature Bypass Vulnerability
• CVE-2004-0200, published 2004-09-28. High severity, CVSS 9.3. EPSS: 49% chance of exploitation in the next 30 days. Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with…
• CVE-2004-0573, published 2004-09-28. High severity, CVSS 7.5. EPSS: 42.3% chance of exploitation in the next 30 days. Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a…
• CVE-2006-0001, published 2006-09-12. High severity, CVSS 9.3. EPSS: 42% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing…
• CVE-2008-0102, published 2008-02-12. High severity, CVSS 10.0. EPSS: 36.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid "memory values," aka…
• CVE-2007-1754, published 2007-07-10. High severity, CVSS 9.3. EPSS: 32.8% chance of exploitation in the next 30 days. PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a…
• CVE-2013-1320, published 2013-05-15. High severity, CVSS 10.0. EPSS: 29% chance of exploitation in the next 30 days. Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."
• CVE-2008-0104, published 2008-02-12. High severity, CVSS 9.3. EPSS: 28.9% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka "Publisher Memory Corruption…
• CVE-2011-3410, published 2011-12-14. High severity, CVSS 9.3. EPSS: 28.5% chance of exploitation in the next 30 days. Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in…

Latest

• CVE-2026-81385, published 2026-09-08. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
• CVE-2026-69742, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
• CVE-2024-20673, published 2024-02-13. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Microsoft Office Remote Code Execution Vulnerability
• CVE-2023-28295, published 2023-06-17. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Microsoft Publisher Remote Code Execution Vulnerability
• CVE-2023-28287, published 2023-06-17. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Microsoft Publisher Remote Code Execution Vulnerability
• CVE-2022-29107, published 2022-05-10. Medium severity, CVSS 5.5. EPSS: 3.1% chance of exploitation in the next 30 days. Microsoft Office Security Feature Bypass Vulnerability
• CVE-2020-0760, published 2020-04-15. High severity, CVSS 8.8. EPSS: 8.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from…
• CVE-2018-8245, published 2018-06-14. High severity, CVSS 7.8. EPSS: 16.9% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote…
• CVE-2017-8725, published 2017-09-13. High severity, CVSS 7.8. EPSS: 20.3% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microsoft…