Vulnerabilities fixed in Microsoft Office

🗓️ 10 Dec 2024 19:33:29Reported by NCSCType

Microsoft Office fixes vulnerabilities enabling privilege escalation, code execution, or data access; user must open rogue file or link.

Reporter	Title	Published	Views	Family All 142
Information Security Automation	December Microsoft Patch Tuesday	10 Dec 202423:19	–	avleonov
BDU FSTEC	Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel, related to the use of memory after it is freed, allowing an attacker to execute arbitrary code.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server’s software packages lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office packages arises from the improper handling of symbolic links before accessing a file, allowing attackers to exploit their privileges.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in their lack of access control mechanisms, which allows attackers to increase their privileges.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the improper limitation of XML references to external objects, which allows attackers to gain unauthorized access to protected information.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the LDAP service protocol for Windows operating systems allows a hacker to execute arbitrary code.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Access database management system, Microsoft Office applications, and 365 Enterprise Apps relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package, related to deficiencies in access control, allows attackers to escalate their privileges.	16 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in errors in processing the relative path to the catalog, allowing an attacker to disclose protected information.	16 Dec 202400:00	–	bdu_fstec