Description of the security update for Office Online Server: September 8, 2020

🗓️ 08 Sep 2020 07:00:00Reported by MicrosoftType

Security update resolves Office Online Server vulnerabilities allowing remote code execution

Reporter	Title	Published	Views	Family All 89
Gitee	Exploit for CVE-2020-1189	14 Sep 202518:19	–	gitee
Information Security Automation	Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange	30 Sep 202023:46	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Word text editors, related to errors in memory object handling, allows attackers to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft Excel packages lies in memory object processing errors, which allow attackers to exploit these vulnerabilities to disclose sensitive information.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft Office Online Server, and Microsoft SharePoint Server lies in memory object processing errors, which allow attackers to gain unauthorized access to protected information.	24 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office Online Server, Microsoft Excel, Microsoft Office, and Microsoft SharePoint Server lies in memory object processing errors, allowing an attacker to execute arbitrary code.	24 Sep 202000:00	–	bdu_fstec
CNVD	Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-59751)	26 Oct 202000:00	–	cnvd
CNVD	Microsoft Excel Information Disclosure Vulnerability (CNVD-2020-59752)	26 Oct 202000:00	–	cnvd
CNVD	Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-68842)	23 Oct 202000:00	–	cnvd
CNVD	Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-08823)	26 Oct 202000:00	–	cnvd