GCVE - cpe:2.3:a:microsoft:office:2013:*:*:*:click-to-run:*:x86:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office:2013:*:*:*:click-to-run:*:x86:*

part: a version: 2013 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Office (`500dd0f0-abf7-5a48-83ed-09faf7777559`)
Edition	*
Language	*
Software edition	click-to-run
Target software	*
Target hardware	x86
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-22004`	vulnerable	2026-06-08 05:40:03.696604	Microsoft Office ClickToRun Remote Code Execution Vulnerability HIGH (7.8) Microsoft Office ClickToRun Remote Code Execution Vulnerability Published: 2022-02-09T16:36:57.000Z Updated: 2025-01-02T18:28:24.126Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22004	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-1581`	vulnerable	2026-06-08 05:21:00.994121	Microsoft Office Click-to-Run Elevation of Privilege Vulnerability An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the system. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The security update addresses the vulnerability by correcting how Microsoft Office Click-to-Run (C2R) components handle objects in memory. Published: 2020-08-17T19:13:50.000Z Updated: 2024-08-04T06:39:10.426Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1581	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16955`	vulnerable	2026-06-08 05:20:54.892763	Microsoft Office Click-to-Run Elevation of Privilege Vulnerability HIGH (7.8) <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this vulnerability, an attacker would need to convince a user to open a specially crafted file.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Office Click-to-Run (C2R) components handle these files.</p> Published: 2020-10-16T22:18:05.000Z Updated: 2024-11-15T16:55:38.851Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16955	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16934`	vulnerable	2026-06-08 05:20:54.751892	Microsoft Office Click-to-Run Elevation of Privilege Vulnerability HIGH (7) <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this vulnerability, an attacker would need to convince a user to open a specially crafted file.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Office Click-to-Run (C2R) components handle these files.</p> Published: 2020-10-16T22:17:54.000Z Updated: 2024-08-04T13:45:34.761Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16934	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16928`	vulnerable	2026-06-08 05:20:54.683621	Microsoft Office Click-to-Run Elevation of Privilege Vulnerability HIGH (7.8) <p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this vulnerability, an attacker would need to convince a user to open a specially crafted file.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Office Click-to-Run (C2R) components handle these files.</p> Published: 2020-10-16T22:17:52.000Z Updated: 2024-08-04T13:45:34.623Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16928	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Office

PURL mappings

Vulnerability references

Contribute