Microsoft Word Remote Code Execution Vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Microsoft | Microsoft 365 Apps for Enterprise | affected |
|
||||||
| Microsoft | Microsoft Office 2019 | affected |
|
||||||
| Microsoft | Microsoft Office LTSC 2021 | affected |
|
||||||
| Microsoft | Microsoft Office LTSC 2024 | affected |
|
||||||
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | affected |
|
||||||
| Microsoft | Microsoft SharePoint Server 2019 | affected |
|
||||||
| Microsoft | Microsoft SharePoint Server Subscription Edition | affected |
|
||||||
| Microsoft | Microsoft Word 2016 | affected |
|
Configuration 1 [-]
|
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 365 Apps |
|
||||||||
| Microsoft | Office 2019 |
|
||||||||
| Microsoft | Office 2021 |
|
||||||||
| Microsoft | Office 2024 |
|
||||||||
| Microsoft | Sharepoint Server |
|
||||||||
| Microsoft | Sharepoint Server 2016 |
|
||||||||
| Microsoft | Sharepoint Server 2019 |
|
||||||||
| Microsoft | Sharepoint Server Subscription Edition |
|
||||||||
| Microsoft | Word 2016 |
|
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.571% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Microsoft sharepoint Server Subscription Edition
|
|
| Vendors & Products |
Microsoft sharepoint Server Subscription Edition
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | |
| Title | Microsoft Word Remote Code Execution Vulnerability | |
| First Time appeared |
Microsoft
Microsoft 365 Apps Microsoft office 2019 Microsoft office 2021 Microsoft office 2024 Microsoft sharepoint Server Microsoft sharepoint Server 2016 Microsoft sharepoint Server 2019 Microsoft word 2016 |
|
| Weaknesses | CWE-122 | |
| CPEs | cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:* cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:* cpe:2.3:a:microsoft:office_2024:*:*:*:*:long_term_servicing_channel:*:*:* cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:* cpe:2.3:a:microsoft:sharepoint_server_2016:*:*:*:*:enterprise:*:*:* cpe:2.3:a:microsoft:sharepoint_server_2019:*:*:*:*:*:*:*:* cpe:2.3:a:microsoft:word_2016:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Microsoft
Microsoft 365 Apps Microsoft office 2019 Microsoft office 2021 Microsoft office 2024 Microsoft sharepoint Server Microsoft sharepoint Server 2016 Microsoft sharepoint Server 2019 Microsoft word 2016 |
|
| References |
| |
| Metrics |
cvssV3_1
|