KLA73225 Multiple vulnerabilities in Microsoft Office

🗓️ 10 Sep 2024 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 38 Views

Multiple vulnerabilities in Microsoft Office. Malicious users can exploit to gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of servic

Reporter	Title	Published	Views	Family All 193
ATTACKERKB	CVE-2024-38226	10 Sep 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Publisher software lies in its data protection mechanisms being breached, allowing attackers to circumvent existing security restrictions.	12 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.	18 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software, related to insufficient cleaning of input data, allows a hacker to execute arbitrary code.	18 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software, related to insufficient cleaning of input data, allows a hacker to execute arbitrary code.	18 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.	18 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.	18 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel’s spreadsheet editor, related to the use of memory after it is freed, allows attackers to escalate their privileges.	18 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software, related to deserialization of unreliable data, allows a attacker to trigger a service failure.	18 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client for iOS, related to improper authentication, allows a hacker to disclose protected information.	8 Oct 202400:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43465
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43463
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38250
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38018
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43464
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43482
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38226
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43492
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38227
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38228

12 Sep 2024 00:00Current

9.6High risk

Vulners AI Score9.6

CVSS 3.17.8 - 8.8

EPSS0.51461

SSVC