Vulnerabilities fixed in Microsoft Office

🗓️ 11 May 2021 00:00:00Reported by NCSCType

Microsoft Office fixes for spoofing, remote code execution, and data access across components.

Reporter	Title	Published	Views	Family All 286
0day.today	Microsoft SharePoint Unsafe Control And ViewState Remote Code Execution Exploit	17 Jun 202100:00	–	zdt
ATTACKERKB	CVE-2021-31181	11 May 202100:00	–	attackerkb
Information Security Automation	Vulristics: Microsoft Patch Tuesdays Q2 2021	10 Jul 202100:14	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Office packages and Microsoft Office Web Apps arises from improper code generation management, allowing an attacker to execute arbitrary code.	20 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft Excel, and Microsoft Office Web Apps Server allow a perpetrator to execute arbitrary code.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office Web Apps Server, Microsoft Office, Office Online Server, and Microsoft Excel stems from improper code generation management, allowing attackers to execute arbitrary code.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Skype for Business Server (Microsoft Lync Server) in corporate communication servers, related to improper code generation, allows attackers to execute arbitrary code.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Skype for Business Server (Microsoft Lync Server) in corporate communication servers, related to information representation errors in the user interface, allows attackers to carry out attacks using a spearphishing technique.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages and Microsoft Office Web Apps lies in the lack of protection for sensitive data, allowing attackers to disclose protected information.	24 May 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SharePoint Enterprise Server software, related to errors in information presentation on the user interface, allows a hacker to execute an attack using a spearphishing technique.	24 May 202100:00	–	bdu_fstec