Microsoft: >> Publisher Security Vulnerabilities
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.01
Published
2026-09-08
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.008
Published
2026-09-08
CVE-2024-38226
Microsoft Publisher Security Feature Bypass Vulnerability
Known exploited
CVSS Score
7.3
EPSS Score
0.027
Published
2024-09-10
Microsoft Office Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.012
Published
2024-02-13
Microsoft Publisher Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.007
Published
2023-06-17
Microsoft Publisher Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.007
Published
2023-06-17
Microsoft Office Security Feature Bypass Vulnerability
CVSS Score
5.5
EPSS Score
0.029
Published
2022-05-10
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.
CVSS Score
8.8
EPSS Score
0.088
Published
2020-04-15
A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.
CVSS Score
7.8
EPSS Score
0.164
Published
2018-06-14
A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microsoft Office Publisher Remote Code Execution".
CVSS Score
7.8
EPSS Score
0.203
Published
2017-09-13
Page 1