KLA73908 Multiple vulnerabilities in Microsoft Office

🗓️ 08 Oct 2024 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 39 Views

Multiple vulnerabilities in Microsoft Office. Malicious users can execute arbitrary code, obtain sensitive information, gain privileges, and spoof the user interface remotely

Reporter	Title	Published	Views	Family All 100
BDU FSTEC	The vulnerability of Microsoft Office Visio packages and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.	11 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to insufficient protection of sensitive data, allows attackers to perform spear-phishing attacks.	11 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and SharePoint Enterprise Server lies in their lack of access control mechanisms, which allows attackers to increase their privileges.	11 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.	11 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.	14 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.	24 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the graphical tool for creating and supporting artificial intelligence in Microsoft Copilot Studio, related to the disclosure of information, allows unauthorized access to protected information.	14 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-43503	8 Oct 202417:54	–	circl
Circl	CVE-2024-43504	8 Oct 202417:54	–	circl
Circl	CVE-2024-43505	8 Oct 202417:54	–	circl

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43609
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43610
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43616
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43503
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43504
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43505
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43576
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
threats	www.threats.kaspersky.com/en/product/Microsoft-Excel/
threats	www.threats.kaspersky.com/en/product/Microsoft-SharePoint/

10 Oct 2024 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 3.17.5 - 7.8

EPSS0.06103

SSVC