KLA71479 Multiple vulnerabilities in Microsoft Office

🗓️ 13 Aug 2024 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 36 Views

Multiple Microsoft Office vulnerabilities for arbitrary code execution, privilege escalation, and user interface spoofing

Reporter	Title	Published	Views	Family All 117
ATTACKERKB	CVE-2024-38189	13 Aug 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft Project, a project management software, relates to errors in processing input data, allowing an attacker to execute arbitrary code.	16 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the extended Microsoft OfficePlus package arises from incorrect handling of symbolic links before accessing a file, allowing an attacker to exploit their privileges.	26 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office suite relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.	13 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Teams’ corporate platform for the iOS operating system allows attackers to perform spear-phishing attacks.	2 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client for Windows operating systems is related to improper external manipulation of the file name or path, allowing an attacker to execute arbitrary code.	3 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft PowerPoint presentation preparation program lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.	8 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office for Mac and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	9 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office for Mac and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	9 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-38084	13 Aug 202418:05	–	circl

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38171
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38197
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38189
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38084
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38173
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38170
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38172
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38169
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
threats	www.threats.kaspersky.com/en/product/Microsoft-Outlook/

21 Aug 2024 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.8

EPSS0.15891

SSVC