[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fliuvwhks6ppzwzjIBqQP7XzsQCi1vbT9F5a7cmsDBKY":3,"g5a-ex:microsoft\u002Fpublisher@*":138,"g5a-family:microsoft\u002Fpublisher":148},{"success":4,"data":5},true,{"product":6,"versions":38,"topVulnerabilitiesByEpss":46,"kevVulnerabilities":102,"seoMetadata":116,"meta":135},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":37},"microsoft","publisher",7,43,2,"2024-09-10",[14,18,21,24,29,32,35],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"2000",6,1,{"version":19,"cve_count":20,"kev_count":17,"has_kev":4},"2002",13,{"version":22,"cve_count":23,"kev_count":17,"has_kev":4},"2003",29,{"version":25,"cve_count":26,"kev_count":27,"has_kev":28},"2007",14,0,false,{"version":30,"cve_count":31,"kev_count":27,"has_kev":28},"2010",8,{"version":33,"cve_count":34,"kev_count":27,"has_kev":28},"2013",4,{"version":36,"cve_count":9,"kev_count":17,"has_kev":4},"2016","Publisher by Microsoft is a technology product with 7 tracked versions and 43 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[39,40,41,42,43,44,45],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":20,"kev_count":17,"has_kev":4},{"version":22,"cve_count":23,"kev_count":17,"has_kev":4},{"version":25,"cve_count":26,"kev_count":27,"has_kev":28},{"version":30,"cve_count":31,"kev_count":27,"has_kev":28},{"version":33,"cve_count":34,"kev_count":27,"has_kev":28},{"version":36,"cve_count":9,"kev_count":17,"has_kev":4},[47,55,63,68,73,79,84,89,93,98],{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":28,"epssScore":54},"CVE-2004-0200","Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.","2004-09-28",9.3,"v2","Critical",0.49024,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":4,"epssScore":62},"CVE-2007-0671","Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.","2007-02-03",8.8,"v3.1","High",0.43241,{"cveId":64,"description":65,"publishedDate":50,"cvssScore":66,"cvssVersion":52,"severity":61,"isKev":28,"epssScore":67},"CVE-2004-0573","Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.",7.5,0.42337,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":28,"epssScore":72},"CVE-2006-0001","Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted PUB file, which causes an overflow when parsing fonts.","2006-09-12",0.41966,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":52,"severity":53,"isKev":28,"epssScore":78},"CVE-2008-0102","Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, related to invalid \"memory values,\" aka \"Publisher Invalid Memory Reference Vulnerability.\"","2008-02-12",10,0.36907,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":28,"epssScore":83},"CVE-2007-1754","PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the \"Publisher Invalid Memory Reference Vulnerability\".","2007-07-10",0.32782,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":77,"cvssVersion":52,"severity":53,"isKev":28,"epssScore":88},"CVE-2013-1320","Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka \"Publisher Buffer Overflow Vulnerability.\"","2013-05-15",0.29027,{"cveId":90,"description":91,"publishedDate":76,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":28,"epssScore":92},"CVE-2008-0104","Unspecified vulnerability in Microsoft Office Publisher 2000, 2002, and 2003 SP2 allows remote attackers to execute arbitrary code via a crafted .pub file, aka \"Publisher Memory Corruption Vulnerability.\"",0.28948,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":28,"epssScore":97},"CVE-2011-3410","Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka \"Publisher Out-of-bounds Array Index Vulnerability.\"","2011-12-14",0.28501,{"cveId":99,"description":100,"publishedDate":96,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":28,"epssScore":101},"CVE-2011-3411","Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka \"Publisher Invalid Pointer Vulnerability.\"",0.27319,[103,108],{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"severity":61,"isKev":4,"epssScore":62,"cisaVulnName":104,"cisaDateAdded":105,"cisaShortDescription":106,"cisaRequiredAction":107},"Microsoft Office Excel Remote Code Execution Vulnerability","2025-08-12","Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":109,"description":110,"publishedDate":12,"cvssScore":111,"severity":61,"isKev":4,"epssScore":112,"cisaVulnName":113,"cisaDateAdded":12,"cisaShortDescription":114,"cisaRequiredAction":115},"CVE-2024-38226","Microsoft Publisher Security Feature Bypass Vulnerability",7.3,0.02667,"Microsoft Publisher Protection Mechanism Failure Vulnerability","Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":117,"metaDescription":118,"keywords":119,"structuredData":120},"Publisher by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Publisher by Microsoft covering 7 versions with 43 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Publisher vulnerabilities, Publisher security, Publisher CVE, Microsoft Publisher, Publisher threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Publisher KEV, Publisher exploited vulnerabilities",{"@context":121,"@type":122,"name":123,"description":118,"url":124,"manufacturer":125,"applicationCategory":129,"softwareVersion":130,"mainEntity":131},"https:\u002F\u002Fschema.org","SoftwareApplication","Publisher","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fpublisher",{"@type":126,"name":127,"url":128},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","7 versions tracked",{"@type":132,"name":133,"description":134,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Publisher Security Vulnerabilities","Security vulnerabilities affecting Publisher by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":136,"apiVersion":137},"2026-10-17T21:25:18.593Z","3.0",{"rows":139,"total":11,"capped":28,"failed":27},[140,144],{"cveId":56,"name":104,"severity":61,"cvss":59,"added":105,"epss":62,"published":141,"ranges":142,"checked":4,"hits":143,"covers":28},"2007-02-03T01:28:00",[15,19,22],[],{"cveId":109,"name":113,"severity":61,"cvss":111,"added":12,"epss":112,"published":145,"ranges":146,"checked":4,"hits":147,"covers":28},"2024-09-10T17:15:25.267",[36],[],[]]