KLA11808 Multiple vulnerabilities in Microsoft Office

🗓️ 09 Jun 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 71 Views

Multiple vulnerabilities in Microsoft Office related to spoofing, privilege escalation, code execution, and information disclosure. Malicious exploitation is possible, leading to UI spoofing, privilege escalation, code execution, security bypass, and sensitive information retrieval

Reporter	Title	Published	Views	Family All 242
Huntr	Improper Resolution of Path Equivalence	28 Feb 202214:48	–	huntr
ATTACKERKB	CVE-2020-1295 Microsoft SharePoint Elevation of Privilege Vulnerability	9 Jun 202000:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday June 2020: The Bleeding Ghost of SMB	23 Jun 202001:31	–	avleonov
BDU FSTEC	Vulnerability of the Microsoft Outlook client, Microsoft Office packages and Office 365, as well as the Microsoft Word text editor, related to the ability to bypass security features, allowing attackers to circumvent existing security restrictions.	19 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors, as well as Microsoft Office products and Office 365, is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code.	19 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to increase their privileges.	19 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office suite relates to errors in memory object handling, allowing an attacker to execute arbitrary code.	26 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software and the Microsoft Project project management software, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.	26 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software allows attackers to carry out cross-site scripting attacks.	26 Jun 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server, related to deficiencies in access control, allows attackers to increase their privileges.	26 Jun 202000:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1298
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1289
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1177
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1318
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1295
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1320
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1323
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1148
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1181
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1229

22 Jan 2024 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 29.3

CVSS 3.15.4 - 8.8

EPSS0.71028

SSVC