KLA70407 Multiple vulnerabilities in Microsoft Office

🗓️ 09 Jul 2024 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 26 Views

Multiple vulnerabilities in Microsoft Office can lead to remote code execution, information disclosure, and user interface spoofing. Vulnerabilities affect SharePoint Server, SharePoint, and Outlook. Public exploits and malware exist. Install latest KB updates and Office updates to mitigate impacts

Reporter	Title	Published	Views	Family All 102
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	10 Jul 202407:00	–	githubexploit
ATTACKERKB	CVE-2024-38094	9 Jul 202400:00	–	attackerkb
Information Security Automation	The severity of the Remote Code Execution – Microsoft SharePoint (CVE-2024-38094) vulnerability has increased	27 Oct 202416:24	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.	15 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.	15 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.	17 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the insufficient validation of requests on the server side, allowing an attacker to disclose protected information.	17 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, related to insufficient validation of input data, allows a hacker to execute arbitrary code.	22 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, related to insufficient protection of operational data, allows attackers to perform spear-phishing attacks.	22 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-38021	10 Jul 202409:47	–	circl

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38023
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38024
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38021
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-32987
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38020
threats	www.threats.kaspersky.com/en/class/Exploit/
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
threats	www.threats.kaspersky.com/en/product/Microsoft-Outlook/
threats	www.threats.kaspersky.com/en/product/Microsoft-SharePoint/

08 Nov 2024 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 3.18.8

EPSS0.55328

SSVC