Lucene search
K

284 matches found

Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.4 views

PT-2020-4380 · Microsoft · Office Click-To-Run

Name of the Vulnerable Software and Affected Versions: Microsoft Office Click-to-Run C2R affected versions not specified Description: The issue is related to errors in handling objects in memory within the Microsoft Office Click-to-Run C2R component. It allows an attacker to elevate their...

7.8CVSS6.6AI score0.0248EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2020/09/09 12:0 a.m.31 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Sep 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

8.8CVSS7.5AI score0.04352EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2020/08/28 12:0 a.m.4 views

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365, related to memory object processing errors, allows attackers to escalate their privileges.

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges using a specially crafted file...

9.3CVSS7.3AI score0.03717EPSS
Exploits0References4
OSV
OSV
added 2020/08/17 7:15 p.m.2 views

CVE-2020-1581

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the syste...

7.8CVSS7.3AI score0.03717EPSS
Exploits0References1
NVD
NVD
added 2020/08/17 7:15 p.m.13 views

CVE-2020-1581

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the syste...

9.3CVSS8.2AI score0.03717EPSS
Exploits0References1
CVE
CVE
added 2020/08/17 7:13 p.m.110 views

CVE-2020-1581

CVE-2020-1581 is an elevation of privilege vulnerability in Microsoft Office Click-to-Run (C2R). The issue stems from how C2R components handle objects in memory, enabling an attacker who already has code execution rights to elevate privileges by running a specially crafted application. The offic...

9.3CVSS8AI score0.03717EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2020/08/17 7:13 p.m.26 views

CVE-2020-1581 Microsoft Office Click-to-Run Elevation of Privilege Vulnerability

...

8.2AI score0.03717EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/08/12 12:0 a.m.97 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Aug 2020)

This host is missing a critical security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS7.1AI score0.08876EPSS
Exploits1References1
Microsoft CVE
Microsoft CVE
added 2020/08/11 7:0 a.m.41 views

Microsoft Office Click-to-Run Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the syste...

9.3CVSS3.9AI score0.03717EPSS
Exploits0
OpenVAS
OpenVAS
added 2020/07/27 12:0 a.m.27 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jul 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS7.7AI score0.22501EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2020/06/10 12:0 a.m.47 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jun 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS5.7AI score0.17157EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/05/13 12:0 a.m.34 views

Microsoft Office 365 (2016 Click-to-Run) Excel RCE Vulnerability (May 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.8CVSS8.6AI score0.11563EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2020/05/05 12:0 a.m.4 views

May 5, 2020, update for PowerPoint 2016 (KB4484337)

May 5, 2020, update for PowerPoint 2016 KB4484337 This article describes update 4484337 for Microsoft PowerPoint 2016 that was released on May 5, 2020.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2016. It doesn't apply t...

6.4AI score
Exploits0
OpenVAS
OpenVAS
added 2020/04/23 12:0 a.m.33 views

Microsoft Office 365 (2016 Click-to-Run) Autodesk FBX Vulnerabilities (Apr 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS6.4AI score0.02037EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2020/04/20 12:0 a.m.3 views

Description of the Office Web Apps Server update: April 9, 2013

Description of the Office Web Apps Server update: April 9, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office Web Apps Server. This update provides the latest fixes for Office Web Apps Server. Additionally, this update contains stability and performance improvements. Issues...

6.4AI score
Exploits0
OpenVAS
OpenVAS
added 2020/04/15 12:0 a.m.41 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Apr 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS8.4AI score0.11548EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2020/04/10 12:0 a.m.4 views

February 6, 2018, update for Office 2013 (KB4011700)

February 6, 2018, update for Office 2013 KB4011700 This article describes update 4011700 for Microsoft Office 2013 that was released on February 6, 2018. This update also applies to Office Home and Student 2013 RT. This update has a prerequisite. Be aware that the update in the Microsoft Download...

6.6AI score
Exploits0
Microsoft KB
Microsoft KB
added 2020/04/09 12:0 a.m.6 views

March 8, 2016, update for Office 2016 (KB3114849)

March 8, 2016, update for Office 2016 KB3114849 This article describes update KB3114849 for Microsoft Office 2016, which was released on March 8, 2016. This update has a prerequisite. Be aware that the update on the Microsoft Download Center applies to the Microsoft Installer .msi-based edition o...

6.6AI score
Exploits0
OpenVAS
OpenVAS
added 2020/03/11 12:0 a.m.50 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Mar 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS8.1AI score0.11548EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/02/12 12:0 a.m.178 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Feb 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS7AI score0.14812EPSS
Exploits0References1
Rows per page
Query Builder