Microsoft Publisher
10 CVEs tracked. 1 of them are in CISA KEV.
This hub aggregates every CVE we track for Microsoft Publisher. Use it to gauge the current risk picture and drill into individual advisories.
Microsoft Publisher CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 10 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- High7
- Medium1
Latest CVEs
The 10 most recently published vulnerabilities affecting Microsoft Publisher.
- CVE-2024-38226Microsoft Publisher Security Feature Bypass Vulnerability7.3
- CVE-2024-20673Microsoft Office Remote Code Execution Vulnerability7.8
- CVE-2023-28295Microsoft Publisher Remote Code Execution Vulnerability7.8
- CVE-2023-28287Microsoft Publisher Remote Code Execution Vulnerability7.8
- CVE-2022-29107Microsoft Office Security Feature Bypass Vulnerability5.5
- CVE-2020-0760A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from ...8.8
- CVE-2018-8245A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote...7.8
- CVE-2017-8725A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microso...7.8
- CVE-2015-2503Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) ...9.3
- CVE-2014-1759pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a c...9.3
Product grouping is registry-driven, with AI assist and human review. How it works