Vulnerability of Microsoft Office packages, Office Online Server, 365 Apps for Enterprise, Web Apps Server, and Microsoft Excel – related to improper code generation – allows attackers to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, Office Online Server, 365 Apps for Enterprise, Web Apps Server, and Microsoft Excel are related to improper code generation. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

The vulnerability of the Click-to-Run component of the Microsoft 365 Apps for Enterprise suite, related to improper code generation management, allows a malicious actor to execute arbitrary code.

The vulnerability of the Click-to-Run component of the Microsoft 365 Apps for Enterprise suite is related to improper code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Microsoft Visio’s graphical editor, as well as Microsoft Office applications and 365 Apps for Enterprise, is related to security configuration errors, allowing attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft PowerPoint presentation creation software, related to improper code generation, allowing attackers to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft PowerPoint presentation software are related to improper code generation. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code remotely...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Mar 2021)

This host is missing a critical security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0740-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping XSA-365 bsc1181843. CVE-2021-26931: Fixed an issue where Linux kernel was treating grant...

Microsoft Office ClickToRun 安全漏洞

Microsoft Office ClickToRun is a component of Microsoft Corporation USA for downloading and installing Microsoft Office products. A security vulnerability exists in Microsoft Office ClickToRun. The following products and versions are affected: Microsoft 365 Apps for Enterprise for 32-bit Systems,...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Excel. The following products and editions are affected: Microsoft Office 2010 Service Pack 2 64-bit editions,Microsoft Office 2013 RT Service Pack...

Microsoft Office PowerPoint 安全漏洞

Microsoft Office PowerPoint is a software used to create, presentations PPT by Microsoft Corporation USA. A security vulnerability exists in Microsoft Office PowerPoint. The following products and editions are affected:Microsoft PowerPoint 2013 Service Pack 1 64-bit editions,Microsoft PowerPoint...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office. The following products and editions are...

Fake Google reCAPTCHA Phishing Attack Swipes Office 365 Passwords

Microsoft users are being targeted with thousands of phishing emails, in an ongoing attack aiming to steal their Office 365 credentials. The attackers add an air of legitimacy to the campaign by leveraging a fake Google reCAPTCHA system and top-level domain landing pages that include the logos of...

Veeam Backup for Microsoft 365 5b cumulative patch KB4124

This patch is superseded by Veeam Backup for Microsoft 365 5b cumulative patch KB4158 Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 5.0.1.179 prior to installing this cumulative patch KB4124. You can check this under Help and Support About in Veeam Backup for...

XLM + AMSI: New runtime defense against Excel 4.0 macro malware

We have recently expanded the integration of Antimalware Scan Interface AMSI with Office 365 to include the runtime scanning of Excel 4.0 XLM macros, to help antivirus solutions tackle the increase in attacks that use malicious XLM macros. This integration, an example of the many security feature...

XLM + AMSI: New runtime defense against Excel 4.0 macro malware

We have recently expanded the integration of Antimalware Scan Interface AMSI with Office 365 to include the runtime scanning of Excel 4.0 XLM macros, to help antivirus solutions tackle the increase in attacks that use malicious XLM macros. This integration, an example of the many security feature...

Microsoft unifies SIEM and XDR to help stop advanced attacks

For all of us in security, the last twelve months have been an incredible series of challenges—from balancing remote work with family priorities, to helping build resilient businesses, and protecting against the latest attacks. 2020 showed us that while we have made great progress, there is still...

March 2, 2021, update for Outlook 2016 (KB4493226)

None None...

Microsoft Lures Populate Half of Credential-Swiping Phishing Emails

Almost half of phishing attacks in 2020 aimed to swipe credentials using Microsoft-related lures – from the Office 365 enterprise service lineup to its Teams collaboration platform. According to a Tuesday report by Cofense, which analyzed millions of emails related to various attacks, 57 percent...

The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system for small and medium-sized businesses lies in the lack of security measures for the website structure. This allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office software packages, and Microsoft 365 apps, as well as Microsoft Office Web Apps and Office Online Server, stems from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office software packages, Microsoft 365 apps, Microsoft Office Web Apps, and Office Online Server is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Malformed URL Prefix Phishing Attacks Spike 6,000%

Researchers from GreatHorn report they have observed a nearly 6,000-percent jump in attacks using “malformed URL prefixes” to evade protections and deliver phishing emails that look legit. They look legit, that is, unless you look closely at the symbols used in the prefix before the URL. “The URL...