Microsoft Word Automation Services vulnerabilities

11 CVEs affecting Microsoft Word Automation Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-0585, published 2019-01-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-0105, published 2017-03-17. Medium severity, CVSS 5.5. EPSS: 30.4% chance of exploitation in the next 30 days. Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow…
CVE-2015-0064, published 2015-02-11. High severity, CVSS 9.3. EPSS: 30% chance of exploitation in the next 30 days. Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote…
CVE-2016-7291, published 2016-12-20. High severity, CVSS 7.1. EPSS: 22.8% chance of exploitation in the next 30 days. Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow…
CVE-2016-7290, published 2016-12-20. High severity, CVSS 7.1. EPSS: 22.8% chance of exploitation in the next 30 days. Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow…
CVE-2016-7233, published 2016-11-10. Medium severity, CVSS 6.5. EPSS: 22.4% chance of exploitation in the next 30 days. Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2013 SP1, and…
CVE-2017-8512, published 2017-06-15. High severity, CVSS 8.8. EPSS: 22.1% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique…
CVE-2012-2528, published 2012-10-09. High severity, CVSS 9.3. EPSS: 22.1% chance of exploitation in the next 30 days. Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft SharePoint Server…
CVE-2019-0585, published 2019-01-08. High severity, CVSS 8.8. EPSS: 22% chance of exploitation in the next 30 days. A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects…
CVE-2018-1028, published 2018-04-12. High severity, CVSS 8.8. EPSS: 18.9% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution…
CVE-2019-0561, published 2019-01-08. Medium severity, CVSS 5.5. EPSS: 7.9% chance of exploitation in the next 30 days. An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office…

Latest

CVE-2018-8378, published 2018-08-15. Medium severity, CVSS 5.5. EPSS: 6.8% chance of exploitation in the next 30 days. An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft…