Class familyMicrosoft · Office
Microsoft Office code injection flaws, 2009–2012
4 Office CVEs with CWE-94 weaknesses, 25 Feb 2009 to 15 Aug 2012. 4 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
3 2009’09
2010’10
2011’11
1 2012’12
In CISA KEVNot in KEV
20093 CVEs, 3 in KEV
20121 CVE, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2009-0238KEV | 25 Feb 2009 | Microsoft Office Remote Code Execution | Grouped by weakness | 63.9 |
| CVE-2009-0556KEV | 3 Apr 2009 | Microsoft Office PowerPoint Code Injection Vulnerability | Grouped by weakness | 64.0 |
| CVE-2009-0557KEV | 10 Jun 2009 | Microsoft Office Object Record Corruption Vulnerability | Grouped by weakness | 63.3 |
| CVE-2012-1856KEV | 15 Aug 2012 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability | Grouped by weakness | 71.8 |