Publisher

This hub aggregates every CVE we track for Publisher, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Publisher.

• CVE-2024-38226Microsoft Publisher Security Feature Bypass VulnerabilityKEV7.3Sep 10, 2024
• CVE-2024-20673Microsoft Office Remote Code Execution Vulnerability7.8Feb 13, 2024
• CVE-2023-28295Microsoft Publisher Remote Code Execution Vulnerability7.8Jun 17, 2023
• CVE-2023-28287Microsoft Publisher Remote Code Execution Vulnerability7.8Jun 17, 2023
• CVE-2022-29107Microsoft Office Security Feature Bypass Vulnerability5.5May 10, 2022
• CVE-2020-0760A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from ...8.8Apr 15, 2020
• CVE-2018-8245A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote...7.8Jun 14, 2018
• CVE-2017-8725A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microso...7.8Sep 13, 2017
• CVE-2016-7289Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulne...7.8Dec 20, 2016
• CVE-2015-2503Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) ...9.3Nov 11, 2015
• CVE-2014-1759pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a c...9.3Apr 8, 2014
• CVE-2013-1329Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Under...9.3May 15, 2013
• CVE-2013-1328Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer ...9.3May 15, 2013
• CVE-2013-1327Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher S...9.3May 15, 2013
• CVE-2013-1323Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher In...9.3May 15, 2013