Vulnerabilities fixed in Microsoft Office

🗓️ 12 Apr 2022 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 2 Views

Vulnerabilities in Microsoft Office fixed; remote code execution, spoofing, and data access mitigated.

Reporter	Title	Published	Views	Family All 95
ATTACKERKB	CVE-2022-24473	15 Apr 202219:15	–	attackerkb
ATTACKERKB	CVE-2022-26901	15 Apr 202219:15	–	attackerkb
ATTACKERKB	CVE-2022-26910	15 Apr 202219:15	–	attackerkb
ATTACKERKB	CVE-2022-26911	15 Apr 202219:15	–	attackerkb
ATTACKERKB	CVE-2022-24472	15 Apr 202219:15	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.	26 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation relates to information representation errors in the user interface, allowing attackers to perform spoofing attacks.	3 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Skype for Business Server in corporate communication servers lies in the lack of protection for service data, which allows attackers to carry out spoofing attacks.	17 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Skype for Business Server (Microsoft Lync Server) in corporate communication servers lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.	17 Jun 202200:00	–	bdu_fstec

12 Apr 2022 00:00Current

7High risk

Vulners AI Score7

CVSS 26.8

CVSS 3.15.7 - 8

EPSS0.1991

SSVC

Microsoft Office SharePoint vulnerabilities Skype for Business Excel vulnerabilities Vulnerability updates CVE identifiers CVSS scores