CVE-2019-1200 | ByteOS Network

Vulnerability Details :

CVE-2019-1200

Assigner-microsoft

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-14 Aug, 2019 | 20:55

Updated At-04 Aug, 2024 | 18:13

Microsoft Outlook Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user. To exploit the vulnerability, a user must open a specially crafted file with an affected version of Microsoft Outlook software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file. Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Microsoft Outlook handles files in memory.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:microsoft

Assigner Org ID:f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At:14 Aug, 2019 | 20:55

Updated At:04 Aug, 2024 | 18:13

▼CVE Numbering Authority (CNA)

Microsoft Outlook Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user. To exploit the vulnerability, a user must open a specially crafted file with an affected version of Microsoft Outlook software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file. Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Microsoft Outlook handles files in memory.

Affected Products

Vendor

Microsoft Corporation

Product

Microsoft Office 2019

CPEs

cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*

Platforms

32-bit Systems
x64-based Systems

Versions

Affected

From 19.0.0 before https://aka.ms/OfficeSecurityReleases (custom)

Vendor

Microsoft Corporation

Product

Office 365 ProPlus

CPEs

cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*

Platforms

32-bit Systems
x64-based Systems

Versions

Affected

From 16.0.0 before publication (custom)

Vendor

Microsoft Corporation

Product

Microsoft Outlook 2016

CPEs

cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:x86:*:*
cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:x64:*:*

Platforms

32-bit Systems
x64-based Systems

Versions

Affected

From 16.0.0.0 before publication (custom)

Vendor

Microsoft Corporation

Product

Microsoft Outlook 2013 Service Pack 1

CPEs

cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:x86:*:*
cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:outlook:2013:*:*:*:rt:*:*:*

Platforms

32-bit Systems
x64-based Systems
ARM64-based Systems

Versions

Affected

From 15.0.0.0 before publication (custom)

Vendor

Microsoft Corporation

Product

Microsoft Outlook 2010 Service Pack 2

CPEs

cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*

Platforms

32-bit Systems
x64-based Systems

Versions

Affected

From 13.0.0.0 before publication (custom)

Problem Types

Type	CWE ID	Description
Impact	N/A	Remote Code Execution

Type: Impact

CWE ID: N/A

Description: Remote Code Execution

References

Hyperlink	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1200	x_refsource_MISC

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1200

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1200	x_refsource_MISC x_transferred

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1200

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

Source:secure@microsoft.com

Published At:14 Aug, 2019 | 21:15

Updated At:20 Feb, 2026 | 21:18

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user. To exploit the vulnerability, a user must open a specially crafted file with an affected version of Microsoft Outlook software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file. Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Microsoft Outlook handles files in memory.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1200	secure@microsoft.com	Patch Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1200	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1200

Source: secure@microsoft.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1200

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Similar CVEs

3894Records found

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-2.92% / 86.14%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-chrome_os enterprise_linux_server linux_kernel macos linux_enterprise_desktop windows_8.1 windows_10 flash_player opensuse flash_player_desktop_runtime enterprise_linux_desktop windows_rt_8.1 windows enterprise_linux_workstation linux_enterprise_workstation_extension windows_server_2012 n/a

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-23.81% / 95.89%

||

7 Day CHG~0.00%

Published-12 Feb, 2014 | 02:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0277 and CVE-2014-0278.

Vendor-n/a Microsoft Corporation

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-32.62% / 96.76%

||

7 Day CHG~0.00%

Published-12 Feb, 2014 | 02:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-42.05% / 97.35%

||

7 Day CHG~0.00%

Published-14 Jul, 2020 | 22:54

Updated-04 Aug, 2024 | 06:39

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.

Vendor-Microsoft Corporation

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.04%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-35.03% / 96.93%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

Vendor-n/a Adobe Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Google LLC Apple Inc.Microsoft Corporation

Product-chrome_os enterprise_linux_server linux_kernel macos linux_enterprise_desktop windows_8.1 windows_10 flash_player opensuse flash_player_desktop_runtime enterprise_linux_desktop windows_rt_8.1 windows enterprise_linux_workstation linux_enterprise_workstation_extension windows_server_2012 n/a

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-3.90% / 88.04%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.4||HIGH

EPSS-11.64% / 93.51%

||

7 Day CHG~0.00%

Published-11 Sep, 2020 | 17:09

Updated-04 Aug, 2024 | 06:32

GDI+ Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to open an email attachment or click a link in an email or instant message.</li> <li>In a file-sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit the vulnerability, and then convince users to open the document file.</li> </ul> <p>The security update addresses the vulnerability by correcting the way that the Windows GDI handles objects in the memory.</p>

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2012 windows_8.1 windows_rt_8.1 windows_7 windows_10 windows_server_2019 windows_server_2008 Windows 10 Version 1607 Windows Server version 2004 Windows Server 2019 (Server Core installation)Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows Server 2008 Service Pack 2 Windows 10 Version 1809 Windows Server 2016 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows 8.1 Windows 7 Windows Server 2012 (Server Core installation)Windows 10 Version 1709 Windows 10 Version 1909 Windows 7 Service Pack 1 Windows Server 2016 Windows 10 Version 2004 Windows 10 Version 1507 Windows Server 2008 R2 Service Pack 1 Windows 10 Version 1803 Windows Server 2008 Service Pack 2 (Server Core installation)Windows Server 2008 R2 Service Pack 1 (Server Core installation)Windows Server 2012 R2 Windows Server 2019 Windows Server, version 1909 (Server Core installation)Windows Server 2012 Windows Server 2008 Service Pack 2 Windows Server 2012 R2 (Server Core installation)Windows Server, version 1903 (Server Core installation)Windows 10 Version 1709 for 32-bit Systems

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-11.54% / 93.48%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4187, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Adobe Systems Incorporated

Matching Score-8

Assigner-Adobe Systems Incorporated

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.40%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-4172, CVE-2016-4175, CVE-2016-4179, CVE-2016-4180, CVE-2016-4181, CVE-2016-4182, CVE-2016-4183, CVE-2016-4184, CVE-2016-4185, CVE-2016-4186, CVE-2016-4188, CVE-2016-4189, CVE-2016-4190, CVE-2016-4217, CVE-2016-4218, CVE-2016-4219, CVE-2016-4220, CVE-2016-4221, CVE-2016-4233, CVE-2016-4234, CVE-2016-4235, CVE-2016-4236, CVE-2016-4237, CVE-2016-4238, CVE-2016-4239, CVE-2016-4240, CVE-2016-4241, CVE-2016-4242, CVE-2016-4243, CVE-2016-4244, CVE-2016-4245, and CVE-2016-4246.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel flash_player_desktop_runtime windows windows_8.1 mac_os_x windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.8||HIGH

EPSS-35.83% / 96.98%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-08 Jul, 2025 | 20:03

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192.

Vendor-Microsoft Corporation

Product-python Visual Studio Code

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.8||HIGH

EPSS-37.98% / 97.12%

||

7 Day CHG~0.00%

Published-09 Jun, 2020 | 19:43

Updated-04 Aug, 2024 | 06:31

A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploited this vulnerability could run arbitrary code in the context of the current user, aka 'Windows Shell Remote Code Execution Vulnerability'.

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2019 windows_10 Windows Windows 10 Version 2004 for x64-based Systems Windows Server Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 2004 for ARM64-based Systems Windows Server, version 2004 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-19.79% / 95.31%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-excel excel_viewer office_compatibility_pack n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-52.98% / 97.89%

||

7 Day CHG~0.00%

Published-09 Aug, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Windows Graphics Component RCE Vulnerability," a different vulnerability than CVE-2016-3304.

Vendor-n/a Microsoft Corporation

Product-live_meeting windows_7 windows_server_2008 word_viewer lync skype_for_business windows_vista office n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-19.79% / 95.31%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Microsoft Excel 2010 SP2 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-excel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.5||HIGH

EPSS-20.81% / 95.49%

||

7 Day CHG-2.52%

Published-14 Oct, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer edge n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-4.75% / 89.22%

||

7 Day CHG~0.00%

Published-10 Nov, 2016 | 06:16

Updated-12 Apr, 2025 | 10:46

The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184.

Vendor-n/a Microsoft Corporation

Product-windows_server_2016 windows_7 windows_server_2008 windows_rt_8.1 windows_vista windows_server_2012 windows_8.1 windows_10 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-39.46% / 97.20%

||

7 Day CHG~0.00%

Published-09 Jun, 2020 | 19:43

Updated-04 Aug, 2024 | 06:31

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1236.

Vendor-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-50.27% / 97.77%

||

7 Day CHG~0.00%

Published-09 Aug, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-word_for_mac word_viewer office n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.8||HIGH

EPSS-32.91% / 96.78%

||

7 Day CHG~0.00%

Published-09 Jun, 2020 | 19:43

Updated-04 Aug, 2024 | 06:31

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_10 Windows 10 Version 2004 for x64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 2004 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 2004 for ARM64-based Systems Windows Server, version 2004 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.1||HIGH

EPSS-54.80% / 97.97%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandle LDAP authentication, which allows man-in-the-middle attackers to gain privileges by modifying group-policy update data within a domain-controller data stream, aka "Group Policy Elevation of Privilege Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_7 windows_server_2008 windows_rt_8.1 windows_vista windows_server_2012 windows_8.1 windows_10 n/a

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-49.16% / 97.70%

||

7 Day CHG~0.00%

Published-16 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows PDF Remote Code Execution Vulnerability."

Vendor-n/a Microsoft Corporation

Product-windows_server_2012 windows_8.1 edge windows_10 n/a

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-42.05% / 97.35%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1174, CVE-2020-1176.

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2012 windows_8.1 windows_rt_8.1 windows_7 windows_10 windows_server_2019 windows_server_2008 Windows Windows Server Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.8||HIGH

EPSS-32.73% / 96.77%

||

7 Day CHG~0.00%

Published-14 Jul, 2020 | 22:54

Updated-04 Aug, 2024 | 06:32

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

Vendor-Microsoft Corporation

Product-365_apps Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft 365 Apps for Enterprise for 32-bit Systems

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-5.38% / 89.91%

||

7 Day CHG~0.00%

Published-10 Nov, 2016 | 06:16

Updated-12 Apr, 2025 | 10:46

The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3333, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184.

Vendor-n/a Microsoft Corporation

Product-windows_server_2016 windows_7 windows_server_2008 windows_rt_8.1 windows_vista windows_server_2012 windows_8.1 windows_10 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-42.05% / 97.35%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1175, CVE-2020-1176.

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2012 windows_8.1 windows_rt_8.1 windows_7 windows_10 windows_server_2019 windows_server_2008 Windows Windows Server Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-42.05% / 97.35%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'.

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2012 windows_8.1 windows_rt_8.1 windows_7 windows_10 windows_server_2019 windows_server_2008 Windows Windows Server Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-31.31% / 96.66%

||

7 Day CHG~0.00%

Published-11 Sep, 2020 | 17:08

Updated-04 Aug, 2024 | 06:25

Jet Database Engine Remote Code Execution Vulnerability

<p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.</p> <p>An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.</p> <p>The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory.</p>

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2012 windows_8.1 windows_rt_8.1 windows_7 windows_10 windows_server_2019 windows_server_2008 Windows 10 Version 1607 Windows Server version 2004 Windows Server 2019 (Server Core installation)Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows Server 2008 Service Pack 2 Windows 10 Version 1809 Windows Server 2016 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows 8.1 Windows 7 Windows Server 2012 (Server Core installation)Windows 10 Version 1709 Windows 10 Version 1909 Windows 7 Service Pack 1 Windows Server 2016 Windows 10 Version 2004 Windows 10 Version 1507 Windows Server 2008 R2 Service Pack 1 Windows 10 Version 1803 Windows Server 2008 Service Pack 2 (Server Core installation)Windows Server 2008 R2 Service Pack 1 (Server Core installation)Windows Server 2012 R2 Windows Server 2019 Windows Server, version 1909 (Server Core installation)Windows Server 2012 Windows Server 2008 Service Pack 2 Windows Server 2012 R2 (Server Core installation)Windows Server, version 1903 (Server Core installation)Windows 10 Version 1709 for 32-bit Systems

Matching Score-8

Assigner-Zero Day Initiative

Matching Score-8

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-0.68% / 71.24%

||

7 Day CHG~0.00%

Published-22 Apr, 2020 | 20:51

Updated-04 Aug, 2024 | 11:14

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the OCRAndExportToExcel command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9946.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf windows foxit_reader PhantomPDF

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-5.38% / 89.91%

||

7 Day CHG~0.00%

Published-10 Nov, 2016 | 06:16

Updated-12 Apr, 2025 | 10:46

The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0026, CVE-2016-3332, CVE-2016-3334, CVE-2016-3335, CVE-2016-3338, CVE-2016-3340, CVE-2016-3342, CVE-2016-3343, and CVE-2016-7184.

Vendor-n/a Microsoft Corporation

Product-windows_server_2016 windows_7 windows_server_2008 windows_rt_8.1 windows_vista windows_server_2012 windows_8.1 windows_10 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-9.3||HIGH

EPSS-49.41% / 97.72%

||

7 Day CHG~0.00%

Published-09 Dec, 2015 | 11:00

Updated-12 Apr, 2025 | 10:46

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10 Gold and 1511, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1, and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Graphics Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-live_meeting windows_rt windows_7 windows_8 windows_server_2008 word_viewer lync windows_rt_8.1 skype_for_business windows_vista office windows_server_2012 windows_8.1 windows_10 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Zero Day Initiative

Matching Score-8

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-0.37% / 58.63%

||

7 Day CHG~0.00%

Published-22 Apr, 2020 | 20:51

Updated-04 Aug, 2024 | 11:14

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Export command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9865.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf reader windows PhantomPDF

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.5||HIGH

EPSS-20.81% / 95.49%

||

7 Day CHG-2.52%

Published-14 Oct, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer edge n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Zero Day Initiative

Matching Score-8

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-3.06% / 86.47%

||

7 Day CHG~0.00%

Published-22 Apr, 2020 | 20:50

Updated-04 Aug, 2024 | 11:14

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XFA templates. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10132.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf reader windows Reader

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.8||HIGH

EPSS-20.36% / 95.40%

||

7 Day CHG+2.20%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-internet_explorer edge n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-13.81% / 94.14%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1028, CVE-2020-1126, CVE-2020-1150.

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2012 windows_8.1 windows_rt_8.1 windows_10 windows_server_2019 Windows Windows Server Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-32.41% / 96.74%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-office_web_apps_server word_for_mac office_web_apps word_viewer office sharepoint_foundation n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-18.99% / 95.18%

||

7 Day CHG~0.00%

Published-14 Sep, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Automation Services on SharePoint Server 2013 SP1, and Office Online Server allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3362.

Vendor-n/a Microsoft Corporation

Product-office_online_server office_compatibility_pack excel excel_viewer sharepoint_designer n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.5||HIGH

EPSS-2.34% / 84.57%

||

7 Day CHG+0.17%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'.

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2012 windows_8.1 windows_rt_8.1 windows_7 windows_10 windows_server_2019 windows_server_2008 Windows Windows Server Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems

CWE ID-CWE-295

Improper Certificate Validation

Matching Score-8

Assigner-Zero Day Initiative

Matching Score-8

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-0.37% / 58.63%

||

7 Day CHG~0.00%

Published-22 Apr, 2020 | 20:50

Updated-04 Aug, 2024 | 11:14

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Save command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9831.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf reader windows PhantomPDF

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.8||HIGH

EPSS-30.34% / 96.58%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A remote code execution vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory, aka 'Microsoft Color Management Remote Code Execution Vulnerability'.

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2019 windows_10 Windows Windows Server Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.8||HIGH

EPSS-21.25% / 95.55%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1028, CVE-2020-1136, CVE-2020-1150.

Vendor-Microsoft Corporation

Product-windows_server_2016 windows_server_2019 windows_10 Windows Windows Server Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Zero Day Initiative

Matching Score-8

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-2.84% / 85.94%

||

7 Day CHG~0.00%

Published-22 Apr, 2020 | 20:50

Updated-04 Aug, 2024 | 11:14

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10192.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf reader windows PhantomPDF

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Zero Day Initiative

Matching Score-8

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-1.62% / 81.58%

||

7 Day CHG~0.00%

Published-22 Apr, 2020 | 20:50

Updated-04 Aug, 2024 | 11:14

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the communication API. The issue lies in the handling of the CombineFiles command, which allows an arbitrary file write with attacker controlled data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9830.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf reader windows PhantomPDF

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

Matching Score-8

Assigner-Zero Day Initiative

Matching Score-8

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-2.84% / 85.94%

||

7 Day CHG~0.00%

Published-22 Apr, 2020 | 20:50

Updated-04 Aug, 2024 | 11:14

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10195.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf reader windows PhantomPDF

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Zero Day Initiative

Matching Score-8

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-0.37% / 58.63%

||

7 Day CHG~0.00%

Published-22 Apr, 2020 | 20:51

Updated-04 Aug, 2024 | 11:14

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the RotatePage command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9943.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf reader windows PhantomPDF

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Matching Score-8

Assigner-Zero Day Initiative

Matching Score-8

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-2.84% / 85.94%

||

7 Day CHG~0.00%

Published-22 Apr, 2020 | 20:50

Updated-04 Aug, 2024 | 11:14

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10191.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf reader windows PhantomPDF

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-7.8||HIGH

EPSS-30.02% / 96.54%

||

7 Day CHG~0.00%

Published-13 Jul, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Vendor-n/a Microsoft Corporation

Product-word_for_mac word_viewer office_compatibility_pack word_rt office word n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Zero Day Initiative

Matching Score-8

Assigner-Zero Day Initiative

CVSS Score-7.8||HIGH

EPSS-3.06% / 86.47%

||

7 Day CHG~0.00%

Published-22 Apr, 2020 | 20:51

Updated-04 Aug, 2024 | 11:14

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of widgets in XFA forms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10650.

Vendor-Microsoft Corporation Foxit Software Incorporated

Product-phantompdf reader windows Reader

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Microsoft Corporation

Matching Score-8

Assigner-Microsoft Corporation

CVSS Score-8.1||HIGH

EPSS-13.51% / 94.06%

||

7 Day CHG~0.00%

Published-09 Jun, 2020 | 19:43

Updated-04 Aug, 2024 | 06:25

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.

Vendor-Microsoft Corporation

Product-windows_server_2016 chakracore windows_10 windows_server_2019 edge ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows Server 2019 Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows Server 2016 Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1909 for x64-based Systems

CWE ID-CWE-787

Out-of-bounds Write