Vulnerabilities fixed in Microsoft Office products

🗓️ 08 Sep 2020 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 6 Views

Microsoft fixes Office and OneDrive vulnerabilities could allow code execution or privilege gain.

Reporter	Title	Published	Views	Family All 165
Gitee	Exploit for CVE-2020-1189	14 Sep 202518:19	–	gitee
Information Security Automation	Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange	30 Sep 202023:46	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Word text editors, related to errors in memory object handling, allows attackers to execute arbitrary code.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft Excel packages lies in memory object processing errors, which allow attackers to exploit these vulnerabilities to disclose sensitive information.	22 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OneDrive for Windows file sharing service lies in the improper definition of links before accessing files. This allows attackers to escalate their privileges.	24 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OneDrive for Windows file sharing service, related to the improper handling of symbolic links, allows a hacker to escalate their privileges.	24 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft Office Online Server, and Microsoft SharePoint Server lies in memory object processing errors, which allow attackers to gain unauthorized access to protected information.	24 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office for Mac software, related to reading beyond the buffer limit, allows an intruder to gain unauthorized access to protected information.	24 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OneDrive for Windows file sharing service lies in the improper definition of links before accessing files. This allows attackers to escalate their privileges.	24 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office Online Server, Microsoft Excel, Microsoft Office, and Microsoft SharePoint Server relates to errors in memory object handling, allowing an attacker to execute arbitrary code.	24 Sep 202000:00	–	bdu_fstec

08 Sep 2020 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.8

CVSS 3.17.8 - 8.8

EPSS0.25017

Office vulnerabilities OneDrive vulnerabilities code execution privilege escalation data access Cross Site Scripting