Vulnerabilities fixed in Microsoft Office

🗓️ 11 Jan 2023 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 7 Views

Microsoft Office, SharePoint, and Visio vulnerabilities fixed; install updates from Microsoft security guidance.

Reporter	Title	Published	Views	Family All 148
GithubExploit	Exploit for Improper Access Control in Microsoft	7 Apr 202323:46	–	githubexploit
ATTACKERKB	CVE-2023-21736	10 Jan 202322:15	–	attackerkb
ATTACKERKB	CVE-2023-21741	10 Jan 202322:15	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.	18 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, which stems from insufficient validation of input data, allows attackers to execute arbitrary code.	18 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in security configuration errors, allowing attackers to circumvent existing security restrictions.	18 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.	18 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and 365 Apps for Enterprise packages lies in insufficient validation of input data, allowing attackers to execute arbitrary code.	18 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, which stems from insufficient validation of input data, allows attackers to execute arbitrary code.	18 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office for Mac and 365 Apps for Enterprise packages lies in insufficient validation of input data, allowing an attacker to execute arbitrary code.	18 Jan 202300:00	–	bdu_fstec

11 Jan 2023 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.8 - 8.8

EPSS0.37362

SSVC

Office vulnerabilities SharePoint vulnerabilities Visio vulnerabilities security updates install updates security guidance code execution data access