Vulnerabilities fixed in Microsoft Office

🗓️ 12 Sep 2023 00:00:00Reported by NCSCType

Microsoft fixed Office vulnerabilities enabling code execution, data access, spoofing, and privilege escalation; CVE-2023-36761 is exploited.

Reporter	Title	Published	Views	Family All 151
ATTACKERKB	CVE-2023-36761	12 Sep 202300:00	–	attackerkb
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in their lack of access control mechanisms, allowing attackers to increase their privileges.	13 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.	13 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors, which allows attackers to disclose protected information	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package, related to deficiencies in access control, allows attackers to escalate their privileges.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package, related to security configuration errors, allows attackers to circumvent existing security restrictions.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word’s text editor, related to errors in processing input data, allows a perpetrator to execute arbitrary code.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package, related to errors in information presentation at the user interface level, allows attackers to carry out spoofing attacks.	14 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.	16 Sep 202300:00	–	bdu_fstec

12 Sep 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18.8 - 9.8

EPSS0.18959

SSVC