CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2020-17122 | ALTO7.8 | Microsoft Excel Remote Code Execution Vulnerability | 10/12/2020 |
| CVE-2020-17119 | MEDIO6.5 | Microsoft Outlook Information Disclosure Vulnerability | 10/12/2020 |
| CVE-2020-17067 | ALTO7.8 | Microsoft Excel Security Feature Bypass Vulnerability | 11/11/2020 |
| CVE-2020-17065 | ALTO7.8 | Microsoft Excel Remote Code Execution Vulnerability | 11/11/2020 |
| CVE-2020-17064 | ALTO7.8 | Microsoft Excel Remote Code Execution Vulnerability | 11/11/2020 |
| CVE-2020-17063 | MEDIO6.8 | Microsoft Office Online Spoofing Vulnerability | 11/11/2020 |
| CVE-2020-17062 | ALTO7.8 | Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability | 11/11/2020 |
| CVE-2020-17020 | BAJO3.3 | Microsoft Word Security Feature Bypass Vulnerability | 11/11/2020 |
| CVE-2020-17019 | ALTO7.8 | Microsoft Excel Remote Code Execution Vulnerability | 11/11/2020 |
| CVE-2020-16957 | ALTO7.8 | <p>A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.</p>
<p>An attacker could exploit this vulnerability by enticing a victim t | 16/10/2020 |
| CVE-2020-16955 | ALTO7.8 | <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p>
<p>To exploit this vulnerability, an attacker would need to convince a user to open a specially craft | 16/10/2020 |
| CVE-2020-16954 | ALTO7.8 | <p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user right | 16/10/2020 |
| CVE-2020-16949 | MEDIO4.7 | <p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system.</p>
<p>Exploitation of the vulnerability requires that a specially cra | 16/10/2020 |
| CVE-2020-16947 | ALTO7.5 | <p>A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the targeted user. If the targeted user is logged on with administrative user ri | 16/10/2020 |
| CVE-2020-16934 | ALTO7.0 | <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p>
<p>To exploit this vulnerability, an attacker would need to convince a user to open a specially craft | 16/10/2020 |