CVE-2018-8573

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8539...

CVE-2018-8522

CVE-2018-8522 is a remote code execution in Microsoft Outlook where the vulnerability arises from improper handling of objects in memory, allowing an attacker to run code with the current user’s privileges when a specially crafted file is processed. CVE-2018-8582 is another Outlook RCE triggered ...

CVE-2018-8546

CVE-2018-8546 is a denial-of-service vulnerability in Skype for Business (also affecting Lync) caused by improper handling of emojis. An attacker could trigger a DoS by sending a sequence of emojis, causing the target service to stop responding. Microsoft’s MSRC advisory notes the fix addresses e...

CVE-2018-8577

CVE-2018-8577 affects Microsoft Excel (and related Office components). The vulnerability arises when Excel fails to properly handle objects in memory, enabling a remote code execution where an attacker could run arbitrary code in the context of the current user. CVSSv3 vector indicates a local at...

CVE-2018-8524

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-852...

CVE-2018-8546

A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Nov 2018)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Dynamics 365 Remote Code Execution Vulnerability

Dynamics 365 is a product family of enterprise resource planning and customer relationship management applications released in July 2016 by Microsoft. A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises version 8. The vulnerability stems from the Dynamics server...

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability (CNVD-2018-23146)

Dynamics 365 is a product family of enterprise resource planning and customer relationship management applications released in July 2016 by Microsoft. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises version 8. The vulnerability stems from the software failing to...

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability (CNVD-2018-23148)

Dynamics 365 is a product family of enterprise resource planning and customer relationship management applications released in July 2016 by Microsoft. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises version 8. The vulnerability stems from the software failing to...

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability (CNVD-2018-23147)

Dynamics 365 is a product family of enterprise resource planning and customer relationship management applications released in July 2016 by Microsoft. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises version 8. The vulnerability stems from the software failing to...

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability

Dynamics 365 is a product family of enterprise resource planning and customer relationship management applications released in July 2016 by Microsoft. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises version 8. The vulnerability stems from the software failing to...

November 2018 Patch Tuesday – 62 Vulns, TFTP Server RCE, Adobe PoC

This month's Patch Tuesday addresses 62 vulnerabilities, with 12 of them labeled as Critical. Out of the Criticals, 8 are for the Chakra Scripting Engine used by Microsoft Edge. A Remote Code Execution vulnerability in Windows Deployment Services' TFTP server is also addressed in this release...

Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...

Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected...

2018 年 11 月のセキュリティ更新プログラム (月例)

2019/2/14 更新: お知らせ Microsoft Dynamics 365 の脆弱性 CVE-2018-8654 の詳細ページを公開しました。脆弱性に対応するための更新プログラム...

Microsoft Dynamics 365 CVE-2018-8606 Cross Site Scripting Vulnerability

Description Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

Microsoft Skype for Business and Lync CVE-2018-8546 Denial of Service Vulnerability

Description Microsoft Skype for Business and Lync are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Lync 2013 32-bit SP1 Microsoft Lync 2013...

Microsoft Outlook CVE-2018-8524 Remote Code Execution Vulnerability

Description Microsoft Outlook is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Office 2019...

Microsoft Outlook CVE-2018-8558 Information Disclosure Vulnerability

Description Microsoft Outlook is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft...