KLA51714 Multiple vulnerabilities in Microsoft Office

🗓️ 08 Aug 2023 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 85 Views

Multiple vulnerabilities in Microsoft Office. Malicious users can exploit to spoof user interface, execute arbitrary code, obtain sensitive information

Reporter	Title	Published	Views	Family All 220
ATTACKERKB	CVE-2023-36892	8 Aug 202318:15	–	attackerkb
ATTACKERKB	CVE-2023-36897	8 Aug 202318:15	–	attackerkb
Information Security Automation	August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper	30 Aug 202316:15	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server software allows a perpetrator to gain unauthorized access to protected information.	11 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, which stems from insufficient validation of input data, allows attackers to execute arbitrary code.	11 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, related to errors in information presentation by the user interface, allows a hacker to perform a spoofing attack.	11 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server’s software packages, related to errors in information presentation on the user interface, allows attackers to perform spoofing attacks.	11 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, related to insufficient validation of input data, allows a hacker to execute arbitrary code.	11 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, related to insufficient validation of input data, allows attackers to execute arbitrary code.	11 Aug 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, which stems from insufficient validation of input data, allows attackers to execute arbitrary code.	14 Aug 202300:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35372
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36891
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36894
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36895
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36865
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36890
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29330
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36896
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35371

28 Mar 2025 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 3.16.5 - 8.8

EPSS0.02153

SSVC