KLA11745 Multiple vulnerabilities in Microsoft Office

🗓️ 14 Apr 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 50 Views

Multiple vulnerabilities in Microsoft Office. Malicious users can gain privileges, execute arbitrary code, spoof user interface

Reporter	Title	Published	Views	Family All 426
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	12 Mar 202002:20	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	11 Mar 202009:13	–	githubexploit
GithubExploit	Exploit for CVE-2020-0976	14 Mar 202007:59	–	githubexploit
Information Security Automation	Microsoft Patch Tuesday April 2020: my classification script, confusing RCE in Adobe Type Manager and updates for older vulnerabilities	26 Apr 202001:24	–	avleonov
Information Security Automation	Microsoft Patch Tuesday May 2020: comments from VM vendors, promising stuff for phishing, troubles with SharePoint and lulz with Visual Studio	13 May 202000:49	–	avleonov
BDU FSTEC	Vulnerabilities of Microsoft Visio graphic editors, Microsoft Excel electronic spreadsheet editors, Microsoft PowerPoint presentation creation software, Microsoft Word text editors, the Microsoft Office and Office 365 software suite, Microsoft Outlook email client, Microsoft Publisher publishing software, Microsoft Project project management software, Microsoft Access database management systems. These vulnerabilities are related to insufficient input validation, allowing attackers to execute arbitrary code.	23 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.	23 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.	23 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.	23 Apr 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.	7 May 202000:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0984
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0980
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0961
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0924
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0925
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0926
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0927
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0920
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0923
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0906

22 Jan 2024 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS 29.3

CVSS 3.15.4 - 8.8

EPSS0.31213

SSVC