Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:word_viewer:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductWord Viewer (7a2ceb35-baea-5d16-9954-b102f7c4f425)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-0540 vulnerable 2026-06-08 05:12:19.915363 Details available
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
Published: 2019-03-06T00:00:00.000Z
Updated: 2024-08-04T17:51:27.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8432 vulnerable 2026-06-08 05:12:05.916137 Details available
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Windows Server 2019, Windows Server 2008 R2, Windows 10, Windows Server 2008.
Published: 2018-10-10T13:00:00.000Z
Updated: 2024-08-05T06:54:36.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0108 vulnerable 2026-06-08 05:08:25.427777 Details available
The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Graphics Component Remote Code Execution Vulnerability." This vulnerability is different from that described in CVE-2017-0014.
Published: 2017-03-17T00:00:00.000Z
Updated: 2024-08-05T12:55:18.713Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7298 vulnerable 2026-06-08 05:08:12.216480 Details available
Microsoft Office 2007 SP3, Office 2010 SP2, Word Viewer, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Published: 2016-12-20T05:54:00.000Z
Updated: 2024-08-06T01:57:47.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7233 vulnerable 2026-06-08 05:08:12.138054 Details available
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2013 SP1, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."
Published: 2016-11-10T06:16:00.000Z
Updated: 2024-08-06T01:57:47.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7193 vulnerable 2026-06-08 05:08:12.080758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7182 vulnerable 2026-06-08 05:08:12.048395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3396 vulnerable 2026-06-08 05:07:45.311229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3263 vulnerable 2026-06-08 05:07:45.139180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3262 vulnerable 2026-06-08 05:07:45.138465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3209 vulnerable 2026-06-08 05:07:45.059346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6108 vulnerable 2026-06-08 05:06:51.304073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6107 vulnerable 2026-06-08 05:06:51.300724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2424 vulnerable 2026-06-08 05:06:35.013599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6357 vulnerable 2026-06-08 05:05:57.488614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1761 vulnerable 2026-06-08 05:05:26.304023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3906 vulnerable 2026-06-08 05:04:33.173797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1335 vulnerable 2026-06-08 05:03:53.387692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.