CVE Database and Vulnerability Search
Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-36565HIGH | Microsoft Office Graphics Elevation of Privilege VulnerabilityMicrosoft Office Graphics Elevation of Privilege Vulnerability CWE-416Oct 10, 2023 | CVSS7.0v3.1 | EPSS0.417% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-36762HIGH | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Word Remote Code Execution Vulnerability CWE-20Sep 12, 2023 | CVSS7.3v3.1 | EPSS1.02% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-36766HIGH | Microsoft Excel Information Disclosure VulnerabilityMicrosoft Excel Information Disclosure Vulnerability CWE-125Sep 12, 2023 | CVSS7.8v3.1 | EPSS1.49% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-36767MEDIUM | Microsoft Office Security Feature Bypass VulnerabilityMicrosoft Office Security Feature Bypass Vulnerability CWE-20Sep 12, 2023 | CVSS4.3v3.1 | EPSS3.32% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-36896HIGH | Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel Remote Code Execution Vulnerability CWE-122Aug 8, 2023 | CVSS7.8v3.1 | EPSS0.985% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-36895HIGH | Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft Outlook Remote Code Execution Vulnerability CWE-416Aug 8, 2023 | CVSS7.8v3.1 | EPSS1.04% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-35371HIGH | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office Remote Code Execution Vulnerability CWE-415Aug 8, 2023 | CVSS7.8v3.1 | EPSS0.985% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-33162MEDIUM | Microsoft Excel Information Disclosure VulnerabilityMicrosoft Excel Information Disclosure Vulnerability CWE-125Jul 11, 2023 | CVSS5.5v3.1 | EPSS0.756% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-33161HIGH | Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel Remote Code Execution Vulnerability CWE-415Jul 11, 2023 | CVSS7.8v3.1 | EPSS0.631% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-33158HIGH | Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel Remote Code Execution Vulnerability CWE-191Jul 11, 2023 | CVSS7.8v3.1 | EPSS0.631% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-33149HIGH | Microsoft Office Graphics Remote Code Execution VulnerabilityMicrosoft Office Graphics Remote Code Execution Vulnerability CWE-416Jul 11, 2023 | CVSS7.8v3.1 | EPSS0.631% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-33133HIGH | Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel Remote Code Execution Vulnerability CWE-122Jun 13, 2023 | CVSS7.8v3.1 | EPSS44% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-33146HIGH | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office Remote Code Execution Vulnerability CWE-122Jun 13, 2023 | CVSS7.8v3.1 | EPSS0.841% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-32029HIGH | Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel Remote Code Execution Vulnerability CWE-125Jun 13, 2023 | CVSS7.8v3.1 | EPSS53.5% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-29344HIGH | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office Remote Code Execution Vulnerability CWE-122Jun 5, 2023 | CVSS7.8v3.1 | EPSS0.922% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-24953HIGH | Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel Remote Code Execution Vulnerability CWE-416May 9, 2023 | CVSS7.8v3.1 | EPSS0.705% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-28311HIGH | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Word Remote Code Execution Vulnerability CWE-122Apr 11, 2023 | CVSS7.8v3.1 | EPSS2.72% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-28285HIGH | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office Graphics Remote Code Execution Vulnerability CWE-416Apr 11, 2023 | CVSS7.8v3.1 | EPSS3.01% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-24910HIGH | Windows Graphics Component Elevation of Privilege VulnerabilityWindows Graphics Component Elevation of Privilege Vulnerability CWE-476Mar 14, 2023 | CVSS7.8v3.1 | EPSS0.393% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-23399HIGH | Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel Remote Code Execution Vulnerability CWE-125Mar 14, 2023 | CVSS7.8v3.1 | EPSS2.53% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21716CRITICAL | Microsoft Word Remote Code Execution VulnerabilityMicrosoft Word Remote Code Execution Vulnerability CWE-190Feb 14, 2023 | CVSS9.8v3.1 | EPSS82.3% | PoCs12 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21734HIGH | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21735. CWE-416Jan 10, 2023 | CVSS7.8v3.1 | EPSS0.915% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21735HIGH | Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21734. CWE-416Jan 10, 2023 | CVSS7.8v3.1 | EPSS0.723% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-44713HIGH | Microsoft Outlook for Mac Spoofing VulnerabilityMicrosoft Outlook for Mac Spoofing Vulnerability. CWE-290Dec 13, 2022 | CVSS7.5v3.1 | EPSS1.49% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-44692HIGH | Microsoft Office Graphics Remote Code Execution VulnerabilityMicrosoft Office Graphics Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-26804, CVE-2022-26805, CVE-2022-26806, CVE-2022-47211, CVE-2022-47212, CVE-2022-47213. Dec 13, 2022 | CVSS7.8v3.1 | EPSS0.784% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |