Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office_compatibility_pack:-:sp2:*:*:*:*:*:*

part: a version: - update: sp2

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductOffice Compatibility Pack (15837542-f979-5c4f-a53d-2cd73ee77c81)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0922 vulnerable 2026-06-08 05:10:25.087399 Details available
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft Office Word Viewer, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Compatibility Pack SP2, Microsoft Online Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2007 SP3, Microsoft Word 2010 SP2, Word 2013 and Microsoft Word 2016 allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".
Published: 2018-03-14T17:00:00.000Z
Updated: 2024-09-16T22:15:01.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2539 vulnerable 2026-06-08 05:02:04.788816 Details available
Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, aka "Word RTF 'listoverridecount' Remote Code Execution Vulnerability."
Published: 2012-12-12T00:00:00.000Z
Updated: 2025-10-22T00:05:45.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-1889 not_vulnerable 2026-06-08 05:00:51.249973 Details available
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Published: 2012-06-13T01:00:00.000Z
Updated: 2025-10-22T00:05:47.142Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.