Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Polarisoffice

First CVE: Jun 28, 2018Active for: 8 yearsTotal CVEs: 4

Polarisoffice produces a productivity and reporting software line with a narrow but engaged user base, encompassing products such as Polaris Office, Polaris ML Report, and Polaris Office 2017. The observed vulnerability surface centers on memory-safety issues—including uninitialized pointers, divide-by-zero conditions, out-of-bounds writes, stack-based buffer overflows, and untrusted search path handling—that reflect the low-level implementation challenges common to client-side office applications. Current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
4
Total CVEs
More Total CVEs than 79% of tracked vendors
0.4
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 4% of tracked vendors
7.5
Avg CVSS Score
Higher Avg CVSS Score than 57% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Polarisoffice over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 28, 2018
8 years ago
Most Recent CVE
Jun 8, 2021
1,876 days ago

Products(3 total)

Top CVEs

Signals from CVEs in this vendor scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2018-12589HIGH
Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory.
Jun 28, 20187.846NOYES
CVE-2020-7837HIGH
An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub_41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking
Dec 16, 20208.825NONO
CVE-2021-34280HIGH
Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vu
Jun 8, 20217.824NONO
CVE-2021-27550MEDIUM
Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. To exploit the vulnerability, someon
Feb 23, 20215.520NONO
View all 4 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products4 CVEs
25%
75%
Severity distribution among all CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local3 (75.0%)
Network1 (25.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required4 (100.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None4 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
25.0% of CVEs· 78th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Polarisoffice.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Polarisoffice — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Polarisoffice's Products

View all 2 CNAs →

Top CWEs