Microsoft Word Web Apps vulnerabilities

2 CVEs affecting Microsoft Word Web Apps, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-2468, published 2015-08-15.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-2468, published 2015-08-15. High severity, CVSS 9.3. EPSS: 29.5% chance of exploitation in the next 30 days. Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation…
• CVE-2014-4117, published 2014-10-15. High severity, CVSS 9.3. EPSS: 17.5% chance of exploitation in the next 30 days. Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1…