Vulnerabilities fixed in Microsoft Office

🗓️ 11 Apr 2023 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 4 Views

Microsoft fixes Office vulnerabilities that allow code execution via malicious files; install updates.

Reporter	Title	Published	Views	Family All 99
0day.today	Microsoft Word 16.72.23040900 - Remote Code Execution Vulnerability	20 Apr 202300:00	–	zdt
0day.today	Microsoft SharePoint Enterprise Server 2016 - Spoofing Exploit	26 Jun 202300:00	–	zdt
0day.today	Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 64-bit Remote Code Execution Vulnerability	26 Jun 202300:00	–	zdt
Information Security Automation	Microsoft Patch Tuesday April 2023: CLFS EoP, Word RCE, MSMQ QueueJumper RCE, PCL6, DNS, DHCP	27 Apr 202322:03	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft Office software package, related to insufficient validation of input data, allows a hacker to execute arbitrary code.	14 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server software allows a perpetrator to compromise the integrity of protected information.	14 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word’s text editor arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.	14 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Publisher software, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.	22 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Publisher software, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.	22 Apr 202300:00	–	bdu_fstec
Circl	CVE-2023-28285	11 Apr 202320:59	–	circl

11 Apr 2023 00:00Current

7High risk

Vulners AI Score7

CVSS 3.18.1

EPSS0.09091

SSVC

Office vulnerabilities Code execution Malicious files SharePoint impersonation Updates recommended