KLA11396 Multiple vulnerabilities in Microsoft Office

🗓️ 08 Jan 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 215 Views

Multiple vulnerabilities in Microsoft Office allowing for information disclosure, code execution, privilege escalation, and UI spoofin

Reporter	Title	Published	Views	Family All 266
0day.today	Microsoft Windows MSHTML Engine - (Edit) Remote Code Execution Exploit	13 Mar 201900:00	–	zdt
Gitee	Exploit for CVE-2014-4878	28 Mar 202000:48	–	gitee
ATTACKERKB	CVE-2019-0541	8 Jan 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.	18 Jan 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the MSHTML mechanism in the Internet Explorer browser and the Microsoft Office suite allows a hacker to execute arbitrary code.	18 Jan 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.	18 Jan 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.	18 Jan 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.	18 Jan 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package lies in the lack of protection for operational data, which allows attackers to gain access to protected information.	18 Jan 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package lies in the lack of protection for operational data, which allows attackers to gain access to protected information.	18 Jan 201900:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0560
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0559
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0541
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0562
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0556
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0558
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0622
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0585
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0557
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0561

22 Jan 2024 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.8

CVSS 29.3

CVSS 38.8

EPSS0.53202

SSVC