Sploitus

9 exploited vulnerabilities in Office For Mac

Vulnerabilities with publicly known exploits

Vendors
Microsoft
With known exploits
9
Affected Microsoft Office versions
= 2010, 2011, 2016, 2004, 2008
Affected Microsoft Word versions
= 2007, 2010, 2013, 2003
Affected Microsoft Office Compatibility Pack versions
All versions
Affected Microsoft Sharepoint Server versions
= 2010, 2013
Affected Microsoft Word Viewer versions
All versions
Affected Microsoft Word Web Apps versions
= 2010
Affected Microsoft Word Web Apps Server versions
= 2013
Affected Microsoft Office Web Apps versions
= 2010

Vulnerabilities with exploits

Highest CVSS first — 9 of these already have exploit code on Sploitus

CVE-2015-2469 1 exploit
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Microsoft Office 2007 - 'wwlib.dll' Type Confusion (MS15-081)
CVE-2015-2468 1 exploit
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Microsoft Office 2007 - 'mso.dll' Arbitrary Free (MS15-081)
CVE-2014-1761 10 exploits
CVSS 9.3 HIGH 2014-03-24FIX AVAILABLE
Microsoft Word RTF Object ConfusionMicrosoft Word RTF Object Confusion
CVE-2013-1315 1 exploit
CVSS 9.3 HIGH 2013-09-11FIX AVAILABLE
Microsoft Excel内存破坏漏洞(CVE-2013-1315)(MS13-073)
CVE-2009-0565 9 exploits
CVSS 9.3 HIGH 2009-06-10
Microsoft Word Record Parsing Buffer OverflowMicrosoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)
CVE-2008-0115 2 exploits
CVSS 9.3 HIGH 2008-03-11FIX AVAILABLE
Microsoft Excel - Code Execution (MS08-014)Microsoft Excel公式解析远程代码执行漏洞（MS08-014）
CVE-2008-0114 2 exploits
CVSS 9.3 HIGH 2008-03-11FIX AVAILABLE
Microsoft Excel - Code Execution (MS08-014)Microsoft Excel多个远程代码执行漏洞（MS08-014）
CVE-2008-0112 2 exploits
CVSS 9.3 HIGH 2008-03-11FIX AVAILABLE
Microsoft Excel - Code Execution (MS08-014)Microsoft Excel多个远程代码执行漏洞（MS08-014）
CVE-2002-0862 1 exploit
CVSS 6.8 MEDIUM 2002-09-10FIX AVAILABLE
Microsoft Internet Explorer 5/6 / Konqueror 2.2.2/3.0 / Weblogic Server 5/6/7 - Invalid X.509 Certificate Chain