Office Security Vulnerabilities

CVE-2022-24113

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True.....

CVE-2022-24115

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build...

CVE-2022-24114

Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build...

CVE-2021-44205

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build...

CVE-2021-44204

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True...

CVE-2021-44206

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build...

CVE-2022-21840

Microsoft Office Remote Code Execution...

CVE-2022-21841

Microsoft Excel Remote Code Execution...

CVE-2021-43905

Microsoft Office app Remote Code Execution...

CVE-2021-42293

Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege...

CVE-2021-42295

Visual Basic for Applications Information Disclosure...

CVE-2021-43255

Microsoft Office Trust Center Spoofing...

CVE-2021-43256

Microsoft Excel Remote Code Execution...

CVE-2021-43875

Microsoft Office Graphics Remote Code Execution...

CVE-2021-44199

DLL hijacking could lead to denial of service. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27305, Acronis Cyber Protect Home Office (Windows) before build...

CVE-2021-43409

The “WPO365 | LOGIN” WordPress plugin (up to and including version 15.3) by wpo365.com is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order XSS). Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied...

CVE-2021-40442

Microsoft Excel Remote Code Execution...

CVE-2021-42296

Microsoft Word Remote Code Execution...

CVE-2021-41368

Microsoft Access Remote Code Execution...

CVE-2021-42292

Microsoft Excel Security Feature Bypass...

CVE-2021-20839

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition to the other servers by processing a specially crafted XML...

CVE-2021-20838

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition by processing a specially crafted XML...

CVE-2021-40471

Microsoft Excel Remote Code Execution...

CVE-2021-40454

Rich Text Edit Control Information Disclosure...

CVE-2021-40472

Microsoft Excel Information Disclosure...

CVE-2021-40474

Microsoft Excel Remote Code Execution...

CVE-2021-40479

Microsoft Excel Remote Code Execution...

CVE-2021-40481

Microsoft Office Visio Remote Code Execution...

CVE-2021-40473

Microsoft Excel Remote Code Execution...

CVE-2021-40480

Microsoft Office Visio Remote Code Execution...

CVE-2021-40485

Microsoft Excel Remote Code Execution...

CVE-2021-40486

Microsoft Word Remote Code Execution...

CVE-2021-40832

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVRDL unpacking module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in...

CVE-2021-33603

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS).....

CVE-2021-38650

Microsoft Office Spoofing...

CVE-2021-38654

Microsoft Office Visio Remote Code Execution...

CVE-2021-38653

Microsoft Office Visio Remote Code Execution...

CVE-2021-38655

Microsoft Excel Remote Code Execution...

CVE-2021-38646

Microsoft Office Access Connectivity Engine Remote Code Execution...

CVE-2021-38658

Microsoft Office Graphics Remote Code Execution...

CVE-2021-38175

SAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read sensitive data over the network, and gather or change information in the current system without user interaction. The attack would not lead to an impact on the availability of the system, but there...

CVE-2021-34478

Microsoft Office Remote Code Execution...

CVE-2021-36941

Microsoft Word Remote Code Execution...

CVE-2021-34451

Microsoft Office Online Server Spoofing...

CVE-2021-34452

Microsoft Word Remote Code Execution...

CVE-2021-34469

Microsoft Office Security Feature Bypass...

CVE-2021-34518

Microsoft Excel Remote Code Execution...

CVE-2021-34501

Microsoft Excel Remote Code Execution...

CVE-2021-31940

Microsoft Office Graphics Remote Code Execution...

CVE-2021-31949

Microsoft Outlook Remote Code Execution...