Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...

Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected...

2018 年 11 月のセキュリティ更新プログラム (月例)

2019/2/14 更新: お知らせ Microsoft Dynamics 365 の脆弱性 CVE-2018-8654 の詳細ページを公開しました。脆弱性に対応するための更新プログラム...

Microsoft Dynamics 365 CVE-2018-8608 Cross Site Scripting Vulnerability

Description Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

PT-2018-1786

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 affected versions not specified Description The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to inject arbitrary code into a user-loaded web...

PT-2018-1808

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Office 365 ProPlus affected versions not specified Microsoft Office affected versions not specified Microsoft Excel Viewer affected versions not specified Description A remote code execution issu...

PT-2018-1785

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 on-premises version 8 Description A remote code execution issue exists due to the server's failure to properly sanitize web requests. This can be exploited by a remote attacker using a specially crafted SQL query,...

PT-2018-1874

Name of the Vulnerable Software and Affected Versions Office 365 ProPlus affected versions not specified Microsoft Office affected versions not specified Description An information disclosure issue exists when attaching files to Outlook messages. This could allow a remote attacker to access...

Microsoft Excel CVE-2018-8574 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

Microsoft Outlook CVE-2018-8582 Remote Code Execution Vulnerability

Description Microsoft Outlook is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the affected system. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Office 2019 for 32-bi...

Microsoft Outlook CVE-2018-8558 Information Disclosure Vulnerability

Description Microsoft Outlook is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft...

Microsoft Dynamics 365 CVE-2018-8605 Cross Site Scripting Vulnerability

Description Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

Microsoft Dynamics 365 CVE-2018-8606 Cross Site Scripting Vulnerability

Description Microsoft Dynamics 365 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

Microsoft Skype for Business and Lync CVE-2018-8546 Denial of Service Vulnerability

Description Microsoft Skype for Business and Lync are prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Lync 2013 32-bit SP1 Microsoft Lync 2013...

PT-2018-1875

Name of the Vulnerable Software and Affected Versions Office 365 ProPlus affected versions not specified Microsoft Office affected versions not specified Description An information disclosure issue exists due to Microsoft Outlook's failure to properly handle "Default link type" settings. This cou...

PT-2018-1789

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 affected versions not specified Description The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to inject arbitrary code into a user-loaded web...

PT-2018-1807

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions affected versions not specified Office 365 ProPlus versions affected versions not specified Microsoft Office versions affected versions not specified Description A remote code execution issue exists due to the software...

PT-2018-1790

Name of the Vulnerable Software and Affected Versions Microsoft Project affected versions not specified Office 365 ProPlus affected versions not specified Microsoft Project Server affected versions not specified Description A remote code execution issue exists due to improper handling of objects ...

PT-2018-1787

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 affected versions not specified Description The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, allowing a remote attacker to inject arbitrary code into a user-loaded web...

Microsoft Excel CVE-2018-8577 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...