Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode.

Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.

Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files.