Vulnerabilities fixed in Microsoft Office

🗓️ 13 Aug 2024 18:21:45Reported by NCSCType

Microsoft Office vulnerabilities fixed; attackers could impersonate users or run code via files.

Reporter	Title	Published	Views	Family All 149
ATTACKERKB	CVE-2024-38189	13 Aug 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to insufficient protection of sensitive data, allows attackers to execute spear-phishing attacks.	12 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft Project, a project management software, relates to errors in processing input data, allowing an attacker to execute arbitrary code.	16 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the graphical tool for creating and supporting artificial intelligence – Microsoft Copilot Studio – arises from insufficiently checking incoming requests, allowing a hacker to execute an SSRF attack.	23 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the extended Microsoft OfficePlus package arises from incorrect handling of symbolic links before accessing a file, allowing an attacker to exploit their privileges.	26 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office suite relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.	13 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Teams’ corporate platform for the iOS operating system allows attackers to perform spear-phishing attacks.	2 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client for Windows operating systems is related to improper external manipulation of the file name or path, allowing an attacker to execute arbitrary code.	3 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft PowerPoint presentation preparation program lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.	8 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office for Mac and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	9 Oct 202400:00	–	bdu_fstec