GCVE - cpe:2.3:a:microsoft:office_365:-:*:*:*:proplus:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office_365:-:*:*:*:proplus:*:*:*

part: a version: - update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Office 365 (`e9237efc-12e7-53b9-ae8d-b2b20f404cae`)
Edition	*
Language	*
Software edition	proplus
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-1446`	vulnerable	2026-06-08 05:13:25.931588	Details available An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'. Published: 2019-11-12T18:53:18.000Z Updated: 2024-08-04T18:20:27.391Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1446	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1402`	vulnerable	2026-06-08 05:13:25.848991	Details available An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Information Disclosure Vulnerability'. Published: 2019-11-12T18:53:00.000Z Updated: 2024-08-04T18:20:26.947Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1402	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1109`	vulnerable	2026-06-08 05:13:24.847943	Details available A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the vulnerability by correcting the way that Microsoft Office Javascript verifies trusted web pages., aka 'Microsoft Office Spoofing Vulnerability'. Published: 2019-07-29T14:08:33.000Z Updated: 2024-08-04T18:06:31.757Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1109	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0945`	vulnerable	2026-06-08 05:12:21.179034	Details available A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0946, CVE-2019-0947. Published: 2019-05-16T18:17:03.000Z Updated: 2024-08-04T17:58:59.988Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0945	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.