Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege / Remote Code Execution

Title: Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege + RCE. Author: nu11secur1ty Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/microsoft-office Reference: https://portswigger.net/web-security/access-control CVE-2023-33148...

CVE-2023-33148

creationtimestamp| type| source ---|---|--- 2023-07-19 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8696 2023-07-22 17:37:23+00:00| published-proof-of-concept| https://t.me/dilagrafie/3124...

Microsoft Office 365 18.2305.1222.0 Remote Code Execution

Title: Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege Vulnerability + RCE. Author: nu11secur1ty Date: 07.18.2023 Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/microsoft-office Reference:...

Security Updates for Microsoft Office Products C2R (July 2023)

The Microsoft Office Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A security feature bypass vulnerability. CVE-2023-33150 - An elevation of privilege vulnerability. CVE-2023-33148 - Multiple remote code execution vulnerabilities...

CVE-2023-33148 Microsoft Office Elevation of Privilege Vulnerability

...

CVE-2023-33148 Microsoft Office Elevation of Privilege Vulnerability

...

CVE-2023-33148

CVE-2023-33148 : Microsoft Office elevation-of-privilege vulnerability affecting Microsoft Office products (including Excel/Word/Outlook components) across multiple Office suites. Root cause is an elevation of privilege in Office components; impact is high (CVE base CVSS 3.1: 7.8) with LOCAL atta...

KLA50773 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code...