Publisher
46 CVEs tracked. 2 of them are in CISA KEV.
This hub aggregates every CVE we track for Publisher, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.
Publisher CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 2 |
Severity
How the 46 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical30
- High13
- Medium3
Latest CVEs
The 15 most recently published vulnerabilities affecting Publisher.
- CVE-2026-81385Microsoft Office Publisher Remote Code Execution Vulnerability8.8
- CVE-2026-69742Microsoft Office Publisher Remote Code Execution Vulnerability8.8
- CVE-2024-38226Microsoft Publisher Security Feature Bypass Vulnerability7.3
- CVE-2024-20673Microsoft Office Remote Code Execution Vulnerability7.8
- CVE-2023-28295Microsoft Publisher Remote Code Execution Vulnerability7.8
- CVE-2023-28287Microsoft Publisher Remote Code Execution Vulnerability7.8
- CVE-2022-29107Microsoft Office Security Feature Bypass Vulnerability5.5
- CVE-2020-0760A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from ...8.8
- CVE-2018-8245A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote...7.8
- CVE-2017-8725A remote code execution vulnerability exists in Microsoft Publisher 2007 Service Pack 3 and Microsoft Publisher 2010 Service Pack 2 when they fail to properly handle objects in memory, aka "Microso...7.8
- CVE-2016-7289Microsoft Publisher 2010 SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulne...7.8
- CVE-2015-2503Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) ...9.3
- CVE-2014-1759pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a c...9.3
- CVE-2013-1329Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Under...9.3
- CVE-2013-1322Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulne...10.0
Product grouping is registry-driven, with AI assist and human review. How it works