KLA12316 Multiple vulnerabilities in Microsoft Office

🗓️ 12 Oct 2021 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 99 Views

Multiple vulnerabilities in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, spoof user interface. List is disclosed

Reporter	Title	Published	Views	Family All 249
Information Security Automation	Security News: Microsoft Patch Tuesday October 2021, Autodiscover, MysterySnail, Exchange, DNS, Apache, HAProxy, VMware vCenter, Moodle	21 Oct 202100:23	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Word’s text editor, related to improper handling of code generation, allows a perpetrator to execute arbitrary code.	15 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server’s software packages, related to errors in information presentation by the user interface, allows attackers to carry out spoofing attacks.	15 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to escalate their privileges.	15 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server packages, related to errors in information presentation by the user interface, allows a perpetrator to gain unauthorized access to protected information.	15 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in improper code generation management, allowing an attacker to execute arbitrary code.	15 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to escalate their privileges.	20 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in information representation errors in the user interface, which allows attackers to carry out phishing attacks.	20 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rich Text Edit Control text editor in the Windows operating system allows a hacker to gain unauthorized access to protected information.	20 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors, related to errors in code generation, allows attackers to execute arbitrary code.	20 Oct 202100:00	–	bdu_fstec

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40454
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41344
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40481
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40483
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40473
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40487
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40482
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40480
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40486
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40485

31 Mar 2025 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 26.8

CVSS 3.18.1 - 8.8

EPSS0.46339

SSVC