[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxJ2MvO1q3RfnCdhtp2YwG2YEGKCJze8RDLjXTleWINM":3,"g5a-family:microsoft\u002Foffice_word_viewer":121,"g5a-ex:microsoft\u002Foffice_word_viewer@*":122},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":78,"seoMetadata":99,"meta":118},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"microsoft","office_word_viewer",1,44,5,"2019-01-08",[14],{"version":15,"cve_count":16,"kev_count":9,"has_kev":4},"2003",12,"Office Word Viewer by Microsoft is a technology product with 1 tracked version and 44 known security vulnerabilities including 5 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":16,"kev_count":9,"has_kev":4},[21,29,35,40,44,49,56,63,68,73],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":4,"epssScore":28},"CVE-2012-1889","Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.","2012-06-13",8.8,"v3.1","High",0.83516,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":26,"severity":27,"isKev":4,"epssScore":34},"CVE-2017-11826","Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.","2017-10-13",7.8,0.81333,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":33,"cvssVersion":26,"severity":27,"isKev":4,"epssScore":39},"CVE-2009-0563","Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; Microsoft Office Word Viewer 2003 SP3; Microsoft Office Word Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a crafted tag containing an invalid length field, aka \"Word Buffer Overflow Vulnerability.\"","2009-06-10",0.62828,{"cveId":41,"description":42,"publishedDate":12,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":4,"epssScore":43},"CVE-2019-0541","A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka \"MSHTML Engine Remote Code Execution Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.",0.53202,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":33,"cvssVersion":26,"severity":27,"isKev":4,"epssScore":48},"CVE-2012-2539","Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka \"Word RTF 'listoverridecount' Remote Code Execution Vulnerability.\"","2012-12-12",0.53033,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":25,"cvssVersion":53,"severity":27,"isKev":54,"epssScore":55},"CVE-2017-8682","Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office Word Viewer, Microsoft Office 2007 Service Pack 3 , and Microsoft Office 2010 Service Pack 2 allows an attacker to execute remote code by the way it handles embedded fonts, aka \"Win32k Graphics Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8683.","2017-09-13","v3.0",false,0.49765,{"cveId":57,"description":58,"publishedDate":38,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":54,"epssScore":62},"CVE-2009-0565","Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a Word document with a malformed record that triggers memory corruption, aka \"Word Buffer Overflow Vulnerability.\"",9.3,"v2","Critical",0.40503,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":54,"epssScore":67},"CVE-2010-1900","Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle malformed records in a Word file, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, aka \"Word Record Parsing Vulnerability.\"","2010-08-11",0.39813,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":25,"cvssVersion":53,"severity":27,"isKev":54,"epssScore":72},"CVE-2017-0283","Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016, Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office Word Viewer, Microsoft Lync 2013 SP1, Skype for Business 2016, Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows, and Microsoft Silverlight 5 when installed on Microsoft Windows allows a remote code execution vulnerability due to the way it handles objects in memory, aka \"Windows Uniscribe Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-8528.","2017-06-15",0.39019,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":54,"epssScore":77},"CVE-2008-4028","Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP1; Office 2004 and 2008 for Mac; and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via crafted control words related to multiple Drawing Object tags in (1) an RTF file or (2) a rich text e-mail message, which triggers incorrect memory allocation and a heap-based buffer overflow, aka \"Word RTF Object Parsing Vulnerability,\" a different vulnerability than CVE-2008-4030.","2008-12-10",0.38057,[79,84,87,91,95],{"cveId":36,"description":37,"publishedDate":38,"cvssScore":33,"severity":27,"isKev":4,"epssScore":39,"cisaVulnName":80,"cisaDateAdded":81,"cisaShortDescription":82,"cisaRequiredAction":83},"Microsoft Office Buffer Overflow Vulnerability","2022-06-08","Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via a Word document with a crafted tag containing an invalid length field.","Apply updates per vendor instructions.",{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"severity":27,"isKev":4,"epssScore":28,"cisaVulnName":85,"cisaDateAdded":81,"cisaShortDescription":86,"cisaRequiredAction":83},"Microsoft XML Core Services Memory Corruption Vulnerability","Microsoft XML Core Services contains a memory corruption vulnerability which could allow for remote code execution.",{"cveId":45,"description":46,"publishedDate":47,"cvssScore":33,"severity":27,"isKev":4,"epssScore":48,"cisaVulnName":88,"cisaDateAdded":89,"cisaShortDescription":90,"cisaRequiredAction":83},"Microsoft Word Remote Code Execution Vulnerability","2022-03-28","Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.",{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"severity":27,"isKev":4,"epssScore":34,"cisaVulnName":92,"cisaDateAdded":93,"cisaShortDescription":94,"cisaRequiredAction":83},"Microsoft Office Remote Code Execution Vulnerability","2022-03-03","A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user.",{"cveId":41,"description":42,"publishedDate":12,"cvssScore":25,"severity":27,"isKev":4,"epssScore":43,"cisaVulnName":96,"cisaDateAdded":97,"cisaShortDescription":98,"cisaRequiredAction":83},"Microsoft MSHTML Remote Code Execution Vulnerability","2021-11-03","Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.",{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Office Word Viewer by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Office Word Viewer by Microsoft covering 1 version with 44 tracked vulnerabilities including 0 critical and 5 high-severity issues and 5 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Office Word Viewer vulnerabilities, Office Word Viewer security, Office Word Viewer CVE, Microsoft Office Word Viewer, Office Word Viewer threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Office Word Viewer KEV, Office Word Viewer exploited vulnerabilities",{"@context":104,"@type":105,"name":106,"description":101,"url":107,"manufacturer":108,"applicationCategory":112,"softwareVersion":113,"mainEntity":114},"https:\u002F\u002Fschema.org","SoftwareApplication","Office Word Viewer","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Foffice_word_viewer",{"@type":109,"name":110,"url":111},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","1 versions tracked",{"@type":115,"name":116,"description":117,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Office Word Viewer Security Vulnerabilities","Security vulnerabilities affecting Office Word Viewer by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":119,"apiVersion":120},"2026-10-17T21:25:33.305Z","3.0",[],{"rows":123,"total":11,"capped":54,"failed":145},[124,129,133,137,141],{"cveId":36,"name":80,"severity":27,"cvss":33,"added":81,"epss":39,"published":125,"ranges":126,"checked":4,"hits":128,"covers":54},"2009-06-10T18:00:00.313",[127],"2003-sp3",[],{"cveId":22,"name":85,"severity":27,"cvss":25,"added":81,"epss":28,"published":130,"ranges":131,"checked":4,"hits":132,"covers":54},"2012-06-13T04:46:46.19",[],[],{"cveId":45,"name":88,"severity":27,"cvss":33,"added":89,"epss":48,"published":134,"ranges":135,"checked":4,"hits":136,"covers":54},"2012-12-12T00:55:01.06",[],[],{"cveId":30,"name":92,"severity":27,"cvss":33,"added":93,"epss":34,"published":138,"ranges":139,"checked":4,"hits":140,"covers":54},"2017-10-13T13:29:02.067",[],[],{"cveId":41,"name":96,"severity":27,"cvss":25,"added":97,"epss":43,"published":142,"ranges":143,"checked":4,"hits":144,"covers":54},"2019-01-08T21:29:00.47",[],[],0]