Vulnerabilities fixed in Microsoft Office

🗓️ 08 Dec 2020 00:00:00Reported by NCSCType

Office and SharePoint vulnerabilities fixed allow code execution, data access, spoofing, and privilege escalation.

Reporter	Title	Published	Views	Family All 238
Information Security Automation	Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020	11 Jan 202101:50	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft 365 Apps for Enterprise suite, related to access control deficiencies, allows attackers to bypass existing security measures.	25 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation software lies in code errors that allow attackers to disclose protected information.	28 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel’s spreadsheet editor involves an operation where data is written beyond the buffer boundaries in memory. This allows attackers to access protected information, execute arbitrary code, or cause a system failure.	28 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office software packages, Microsoft Office Web Apps, Microsoft Office Online Server, and Microsoft 365 Apps for Enterprises, related to buffer overflow vulnerabilities, allows attackers to access protected information.	28 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft PowerPoint presentation preparation and viewing programs, as well as the Microsoft Office suite, stems from insufficient validation of input data. This allows attackers to gain access to protected information, execute arbitrary code, or cause service interruptions.	28 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and Microsoft Office software lies in code errors, allowing attackers to execute arbitrary code.	30 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel, Microsoft Office programs, Microsoft Office Web Apps, Microsoft Office Online Server, and Microsoft 365 Apps for Enterprise lies in the fact that it allows code to execute outside of the buffer, enabling an attacker to execute arbitrary code.	30 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel, Microsoft Office programs, Microsoft Office Web Apps, Microsoft Office Online Server, and Microsoft 365 Apps for Enterprise lies in the fact that it allows code to execute outside of the buffer, enabling an attacker to execute arbitrary code.	30 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises relates to the use of exploits after release. This allows attackers to gain access to protected information, execute arbitrary code, or cause a service failure.	30 Dec 202000:00	–	bdu_fstec

08 Dec 2020 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 210

CVSS 3.18.8 - 9.8

EPSS0.1782

SSVC