Vulnerabilities fixed in Microsoft Office

🗓️ 14 Dec 2021 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 4 Views

Office vulnerabilities fixed; remote code execution, spoofing, data access, and privilege elevation risk.

Reporter	Title	Published	Views	Family All 166
Information Security Automation	Microsoft Patch Tuesday December 2021	16 Dec 202120:53	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft Office software package, related to errors in information presentation on the user interface, allows a hacker to carry out a spear-phishing attack.	12 Jan 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint packages lies in improper code generation management, allowing attackers to execute arbitrary code.	12 Jan 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office App package, related to improper code generation management, allows a perpetrator to execute arbitrary code.	28 Feb 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Visual Basic development environment and the Microsoft Office suite relates to the disclosure of information in the error-prone data area, allowing the disclosure of protected information.	4 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Jet Red Database Engine (MS Jet (Red)) and the Access Connectivity Engine on Microsoft Windows operating systems allows attackers to escalate their privileges.	4 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server packages allows attackers to perform spear-phishing attacks.	4 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects components of Microsoft Office Graphics packages, Microsoft Office programs, Microsoft 365 Apps for Enterprise, and Microsoft Word, allowing attackers to execute arbitrary code.	16 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint software package, related to errors in information presentation on the user interface, allows a hacker to perform a spoofing attack.	21 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft 365 packages relates to improper code generation management, allowing an attacker to execute arbitrary code.	23 Mar 202200:00	–	bdu_fstec

14 Dec 2021 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 26.8

CVSS 3.19.6

EPSS0.07347

SSVC

Microsoft Office Office vulnerabilities Remote code execution Spoofing attack Data access Privilege elevation SharePoint vulnerabilities