Sploitus

3 exploited vulnerabilities in Office Web Apps

Vulnerabilities with publicly known exploits

Vendors
Microsoft
With known exploits
3
Affected Microsoft Office versions
= 2011
Affected Microsoft Office Compatibility Pack versions
All versions
Affected Microsoft Office Web Apps versions
= 2010
Affected Microsoft Office Web Apps Server versions
= 2013
Affected Microsoft Sharepoint Server versions
= 2010, 2013, 2007
Affected Microsoft Word versions
= 2003, 2007, 2010, 2013
Affected Microsoft Word Viewer versions
All versions
Affected Microsoft Excel versions
= 2003, 2007, 2010, 2013

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2014-1761 10 exploits
CVSS 9.3 HIGH 2014-03-24FIX AVAILABLE
Microsoft Word RTF Object ConfusionMicrosoft Word RTF Object Confusion
CVE-2013-1315 1 exploit
CVSS 9.3 HIGH 2013-09-11FIX AVAILABLE
Microsoft Excel内存破坏漏洞(CVE-2013-1315)(MS13-073)
CVE-2010-3324 2 exploits
CVSS 4.3 MEDIUM 2010-09-17
Microsoft IE 8 toStaticHTML()函数不安全HTML过滤漏洞(MS10-071/MS10-072)Microsoft Internet Explorer 8 - 'toStaticHTML()' HTML Sanitization Bypass