Vulnerabilities fixed in Microsoft Office

🗓️ 12 Jan 2021 00:00:00Reported by NCSCType

Microsoft Office and SharePoint vulnerabilities were fixed, addressing remote code execution and privilege escalation risks.

Reporter	Title	Published	Views	Family All 187
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	20 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel, the Microsoft Office suite, Microsoft Office Online Server, Microsoft Office Web Apps Server, and Microsoft 365 Apps relates to the execution of arbitrary code when operations are performed outside of the buffer in memory. This vulnerability allows an attacker to execute arbitrary code.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spoofing attacks.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package arises from insufficient validation of input data, allowing attackers to execute arbitrary code.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server are due to insufficient validation of input data, allowing attackers to execute arbitrary code.	26 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps relates to insufficient input validation, allowing an attacker to execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server relates to writing outside the buffer, allowing an attacker to execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, Microsoft Office products, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server arises from insufficient input data validation, allowing attackers to execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient validation of input data, allowing attackers to execute spoofing attacks.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to elevate their privileges and execute arbitrary code.	8 Feb 202100:00	–	bdu_fstec

12 Jan 2021 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.18.8

CVSS 29.3

EPSS0.03614

SSVC