CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

CVE	Vendor	Product	Added	Due
CVE-2023-36761 — Microsoft Word Information Disclosure Vulnerability Microsoft Word contains an unspecified vulnerability that allows for information disclosure.	Microsoft	Word	Sep 12, 2023	Oct 3, 2023
CVE-2006-2492 — Microsoft Word Malformed Object Pointer Vulnerability Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.	Microsoft	Word	Jun 8, 2022	Jun 22, 2022
CVE-2012-2539 — Microsoft Word Remote Code Execution Vulnerability Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.	Microsoft	Word	Mar 28, 2022	Apr 18, 2022
CVE-2014-1761 — Microsoft Word Memory Corruption Vulnerability Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.	Microsoft	Word	Feb 15, 2022	Aug 15, 2022

Microsoft

CVE-2023-36761 — Microsoft Word Information Disclosure Vulnerability

Microsoft Word contains an unspecified vulnerability that allows for information disclosure.

Word · Sep 12, 2023

Microsoft

Microsoft Word and Microsoft Works Suites contain a malformed object pointer which allows attackers to execute code.

Word · Jun 8, 2022

Microsoft

Microsoft Word allows attackers to execute remote code or cause a denial-of-service (DoS) via crafted RTF data.

Word · Mar 28, 2022

Microsoft

Microsoft Word contains a memory corruption vulnerability which when exploited could allow for remote code execution.

Word · Feb 15, 2022