GCVE - cpe:2.3:a:microsoft:office:2013:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office:2013:*:*:*:*:*:*:*

part: a version: 2013 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Office (`500dd0f0-abf7-5a48-83ed-09faf7777559`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-6364`	vulnerable	2026-06-08 05:05:57.501176	Details available Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 2013 RT Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." Published: 2014-12-11T00:00:00.000Z Updated: 2024-08-06T12:10:13.369Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-082	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-6362`	vulnerable	2026-06-08 05:05:57.498038	Details available Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability." Published: 2015-02-11T02:00:00.000Z Updated: 2024-08-06T12:10:13.415Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1031721 http://www.securityfocus.com/bid/72467 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-013	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1809`	vulnerable	2026-06-08 05:05:26.355761	Details available The MSCOMCTL library in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1 makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted web site, as exploited in the wild in May 2014, aka "MSCOMCTL ASLR Vulnerability." Published: 2014-05-14T10:00:00.000Z Updated: 2024-08-06T09:50:11.352Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1808`	vulnerable	2026-06-08 05:05:26.355337	Details available Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted response during opening of an Office document, aka "Token Reuse Vulnerability." Published: 2014-05-14T10:00:00.000Z Updated: 2024-08-06T09:50:11.265Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-1756`	vulnerable	2026-06-08 05:05:26.284063	Details available Untrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1, when the Simplified Chinese Proofing Tool is enabled, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Microsoft Office Chinese Grammar Checking Vulnerability." Published: 2014-05-14T10:00:00.000Z Updated: 2024-08-06T09:50:11.140Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3889`	vulnerable	2026-06-08 05:04:33.082694	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.