GCVE - cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:*:*

part: a version: 2010 update: sp1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Office (`500dd0f0-abf7-5a48-83ed-09faf7777559`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-8511`	vulnerable	2026-06-08 05:10:08.394246	Details available A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506. Published: 2017-06-15T01:00:00.000Z Updated: 2024-08-05T16:41:22.292Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/98815 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8511	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2466`	vulnerable	2026-06-08 05:06:35.091523	Details available Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability." Published: 2015-08-15T00:00:00.000Z Updated: 2024-08-06T05:17:27.133Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-081 http://www.securitytracker.com/id/1033239	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4117`	vulnerable	2026-06-08 05:05:44.261234	Details available Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1, and SP2 allow remote attackers to execute arbitrary code via crafted properties in a Word document, aka "Microsoft Word File Format Vulnerability." Published: 2014-10-15T10:00:00.000Z Updated: 2024-08-06T11:04:28.492Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/70360 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-061 http://secunia.com/advisories/60973	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3906`	vulnerable	2026-06-08 05:04:33.169586	Details available GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013. Published: 2013-11-06T11:00:00.000Z Updated: 2025-10-22T00:05:40.307Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-096 http://www.exploit-db.com/exploits/30011 http://technet.microsoft.com/security/advisory/2896666 http://blogs.technet.com/b/srd/archive/2013/11/05/cve-2013-3906-a-graphics-vulnerability-exploited-through-word-documents.aspx http://blogs.mcafee.com/mcafee-labs/mcafee-labs-detects-zero-day-exploit-targeting-microsoft-office-2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3859`	vulnerable	2026-06-08 05:04:33.037948	Details available Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability." Published: 2013-09-11T10:00:00.000Z Updated: 2024-08-06T16:22:01.331Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075 http://www.us-cert.gov/ncas/alerts/TA13-253A	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2524`	vulnerable	2026-06-08 05:02:04.757871	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1854`	vulnerable	2026-06-08 05:00:51.154821	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0165`	vulnerable	2026-06-08 05:00:39.739228	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0159`	vulnerable	2026-06-08 05:00:39.704846	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.