Vulnerabilities fixed in Microsoft Office

🗓️ 13 Apr 2021 00:00:00Reported by NCSCType

Microsoft Office fixes Word, SharePoint, Excel, and Outlook vulnerabilities enabling code execution, data access, and denial of service.

Reporter	Title	Published	Views	Family All 153
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, as well as the Microsoft 365 Apps for Enterprise and Microsoft Office products, relates to an operation that goes beyond buffer boundaries in memory. This allows an attacker to execute arbitrary code.	16 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages lies in errors related to code generation, allowing an attacker to execute arbitrary code.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages arises from improper code generation management, allowing an attacker to execute arbitrary code.	21 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word’s text editor, related to errors in code generation, allows a hacker to execute arbitrary code.	23 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient input data validation, which allows attackers to trigger service failures.	27 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects implementations of syntactic analysis for XLS file formats in programs from Microsoft Office, Microsoft Office Web Apps Server, Microsoft Excel, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server. This allows attackers to execute arbitrary code.	27 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft Office Web Apps Server, Microsoft Excel, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server relates to insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.	27 Apr 202100:00	–	bdu_fstec
Circl	CVE-2021-28449	17 Jan 202204:16	–	circl
CNNVD	Microsoft SharePoint 输入验证错误漏洞	13 Apr 202100:00	–	cnnvd
CNNVD	Microsoft Excel 信息泄露漏洞	13 Apr 202100:00	–	cnnvd

13 Apr 2021 00:00Current

7High risk

Vulners AI Score7

CVSS 26.8

CVSS 3.17.8

EPSS0.17031