KLA60570 Multiple vulnerabilities in Microsoft Apps

🗓️ 12 Sep 2023 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 42 Views

Multiple vulnerabilities in Microsoft Apps. Malicious users can exploit to execute arbitrary code. Updates available in Windows Update

Reporter	Title	Published	Views	Family All 111
BDU FSTEC	The vulnerability of the 3D viewer, which involves insufficient validation of input data, allows a perpetrator to execute arbitrary code.	13 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the 3D viewer, which involves insufficient validation of input data, allows a perpetrator to execute arbitrary code.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the 3D Builder software, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.	16 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing lies in the possibility of an operation exceeding the buffer boundaries in memory, allowing a hacker to execute arbitrary code.	16 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing lies in the possibility of an operation exceeding the buffer boundaries in memory, allowing a hacker to execute arbitrary code.	16 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing lies in the possibility of an operation exceeding the buffer boundaries in memory, allowing a hacker to execute arbitrary code.	16 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the 3D viewer, which involves insufficient validation of input data, allows a perpetrator to execute arbitrary code.	16 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability relates to the set of tools and libraries used for creating, importing, and exporting 3D models with the Autodesk FBX SDK. It stems from the use of memory after it is freed, allowing an attacker to execute arbitrary code.	22 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-36739	12 Sep 202320:23	–	circl
Circl	CVE-2023-36760	12 Sep 202320:23	–	circl

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36770
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36772
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36740
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36760
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36739
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41303
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36771
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36773
threats	www.threats.kaspersky.com/en/product/3D-Viewer/
threats	www.threats.kaspersky.com/en/product/3D-Builder/

26 Mar 2025 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS 3.17.8

EPSS0.00903

SSVC