Vulnerabilities fixed in Microsoft Office

🗓️ 14 Jan 2025 19:15:33Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 8 Views

Microsoft fixed Office vulnerabilities that could bypass security, access data, or run code via files.

Reporter	Title	Published	Views	Family All 313
Information Security Automation	January Microsoft Patch Tuesday	14 Jan 202523:22	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Purview’s data management tool, related to insufficient validation of server-side requests, allows a perpetrator to gain unauthorized access to protected information.	6 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GDI+ component in Microsoft Office programs and the Windows operating system allows a hacker to execute arbitrary code.	22 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Access database management system arises from buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.	22 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.	22 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package and the Microsoft Outlook email client arises from incorrect restrictions on file names and other resources, allowing an attacker to execute arbitrary code.	23 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office package, Microsoft 365 Apps for Enterprise, and the Microsoft Outlook email client relates to the use of an uninitialized resource, allowing a perpetrator to execute arbitrary code.	23 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to deserialization mechanism flaws, which allows attackers to circumvent existing security restrictions.	23 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.	23 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.	23 Jan 202500:00	–	bdu_fstec

14 Jan 2025 19:15Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.8 - 8.8

EPSS0.24441

SSVC

Office vulnerabilities Bypass security Access data Execute code Rogue files