KLA77109 Multiple vulnerabilities in Microsoft Office

🗓️ 12 Nov 2024 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 43 Views

Multiple vulnerabilities in Microsoft Office. Malicious users can exploit remote code execution vulnerability in Excel and Office Graphics, and bypass security in Word. Malware exists for these vulnerabilities. Install necessary updates from KB section to mitigate impacts like arbitrary code execution and security bypass

Reporter	Title	Published	Views	Family All 114
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	17 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.	17 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.	22 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft Excel arises from the lack of data cleaning at the management level, allowing an attacker to execute arbitrary code.	26 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Graphics component in the Microsoft Office software suite allows a hacker to execute arbitrary code.	4 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise, related to insufficient validation of input data, allows attackers to disable the protected viewing mode.	4 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Office 365 packages relates to the use of uninitialized resources, allowing an attacker to execute arbitrary code.	10 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Graphics component in Microsoft Office and Office 365 allows a hacker to execute arbitrary code.	10 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-49026	12 Nov 202418:26	–	circl
Circl	CVE-2024-49027	12 Nov 202418:26	–	circl

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49030
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49026
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49032
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49031
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49033
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49029
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49027
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49028
msrc	www.msrc.microsoft.com/update-guide/vulnerability/ADV240001
threats	www.threats.kaspersky.com/en/class/Exploit/

27 Nov 2024 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS 3.17.8

EPSS0.02072

SSVC