Sploitus

5 exploited vulnerabilities in Office Web Apps Server

Vulnerabilities with publicly known exploits

Vendors
Microsoft
With known exploits
5
Affected Microsoft Excel versions
= 2013, 2016
Affected Microsoft Office Web Apps Server versions
= 2013, 2010
Affected Microsoft Office Compatibility Pack versions
All versions
Affected Microsoft Office Online Server versions
= 2016
Affected Microsoft Office Word Viewer versions
All versions
Affected Microsoft Sharepoint Enterprise Server versions
= 2016
Affected Microsoft Sharepoint Server versions
= 2010, 2013
Affected Microsoft Word versions
= 2007, 2010, 2013, 2016, 2011, 2003

Vulnerabilities with exploits

Highest CVSS first β€” 4 of these already have exploit code on Sploitus

CVE-2022-29110
CVSS 9.3 HIGH 2022-04-12
CVE-2017-11826 2 exploits
CVSS 9.3 HIGH 2017-10-10FIX AVAILABLE
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in MicrosoftExploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2015-2468 1 exploit
CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE
Microsoft Office 2007 - 'mso.dll' Arbitrary Free (MS15-081)
CVE-2015-1641 1 exploit
CVSS 9.3 HIGH 2015-04-14FIX AVAILABLE
Microsoft Office ε†…ε­˜ζŸεζΌζ΄ž(CVE-2015-1641)
CVE-2014-1761 10 exploits
CVSS 9.3 HIGH 2014-03-24FIX AVAILABLE
Microsoft Word RTF Object ConfusionMicrosoft Word RTF Object Confusion