CVE-2018-8607

CVE-2018-8607 describes a cross-site scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises) 8.x . The issue arises because the web server does not properly sanitize a specially crafted web request to an affected Dynamics server. Affected product/version: Microsoft Dynamics 365 (on-...

CVE-2018-8522

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-852...

CVE-2018-8607

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 on-premises version 8 Cross Site Scripting Vulnerability." This affects Microsoft...

CVE-2018-8573

CVE-2018-8573 is a remote code execution vulnerability in Microsoft Word/Office products caused by improper handling of objects in memory. The vulnerability could allow an attacker to execute arbitrary code in the security context of the current user when a specially crafted file is opened. Multi...

CVE-2018-8574

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from...

CVE-2018-8524

CVE-2018-8524 is an Outlook remote code execution vulnerability affecting Office 365 ProPlus, Microsoft Office, and Microsoft Outlook. The weakness stems from improper handling of in-memory objects, enabling an attacker to execute arbitrary code via a specially crafted file or input, with the att...

CVE-2018-8582

CVE-2018-8582 is a remote code execution flaw in Microsoft Outlook that arises when parsing specially crafted rule export files. The underlying issue is in Outlook’s handling of objects during parsing, allowing an attacker to execute arbitrary code on the affected system. A successful exploit cou...

CVE-2018-8576

CVE-2018-8576 is a remote code execution vulnerability in Microsoft Outlook that occurs when Outlook fails to properly handle objects in memory. Affected products include Office 365 ProPlus, Microsoft Office, and Microsoft Outlook. The underlying issue is improper handling of in-memory objects, e...

CVE-2018-8575

A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsoft Project Remote Code Execution Vulnerability." This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server...

CVE-2018-8609

CVE-2018-8609 is a remote code execution vulnerability in Microsoft Dynamics 365 (on-premises) version 8 . The server fails to properly sanitize web requests to the affected Dynamics server, allowing an authenticated attacker to execute arbitrary code in the context of the SQL service account by ...

CVE-2018-8608

CVE-2018-8608 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises) 8.x caused by improper sanitization of a specially crafted web request to an affected Dynamics server. Affected software is Microsoft Dynamics 365 (on-premises) version 8 prior to 8.2.3.0008. The vulnera...

CVE-2018-8558

CVE-2018-8558 is an information disclosure vulnerability in Microsoft Outlook related to not respecting the SharePoint Online Admin Center “Default link type” settings. Affected products include Office 365 ProPlus and Microsoft Office. Root cause, per available description, is improper handling o...

CVE-2018-8606

MODE C: Affected product is Microsoft Dynamics 365 (on-premises) 8.x. The issue is a Cross-Site Scripting vulnerability caused by improper sanitization of certain web requests to the Dynamics server (CVE-2018-8606). Impact is web-based script execution in a user’s browser session when a user is e...

CVE-2018-8577

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This...

CVE-2018-8605

Microsoft Dynamics 365 (on-premises), version 8.x prior to 8.2.3.0008, is affected by multiple vulnerabilities including cross-site scripting (CVE-2018-8605, CVE-2018-8606, CVE-2018-8607, CVE-2018-8608) and other issues (CVE-2018-8654, CVE-2018-8609). The Nessus entry consolidates affected versio...

CVE-2018-8575

CVE-2018-8575 is a remote code execution vulnerability in Microsoft Project family products (Microsoft Project, Office 365 ProPlus, Microsoft Project Server) arising when the program fails to properly handle objects in memory. The open-source and vulnerability feeds in the connected documents cor...

CVE-2018-8579

CVE-2018-8579 is described as an information disclosure vulnerability in Microsoft Outlook related to attaching files to messages. The affected products listed are Office 365 ProPlus and Microsoft Office. The provided sources indicate this CVE is distinct from CVE-2018-8558, but do not include co...

CVE-2018-8579

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558...

CVE-2018-8576

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-852...

CVE-2018-8609

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 on-premises version 8 Remote Code Execution Vulnerability." This affects Microsoft...