Microsoft Office
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:office:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Office (500dd0f0-abf7-5a48-83ed-09faf7777559) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-24910 |
vulnerable | 2026-06-08 05:56:08.031771 |
Windows Graphics Component Elevation of Privilege Vulnerability
HIGH (7.8)
Windows Graphics Component Elevation of Privilege Vulnerability
Published: 2023-03-14T16:55:55.876Z
Updated: 2025-01-01T00:48:37.259Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0862 |
vulnerable | 2026-06-08 04:46:22.398776 |
Details available
The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.
Published: 2002-09-10T04:00:00.000Z
Updated: 2024-08-08T03:03:49.357Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.