Lucene search
+L

284 matches found

OpenVAS
OpenVAS
added 2019/12/11 12:0 a.m.45 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Dec 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS5.9AI score0.18328EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.5 views

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 allows attackers to enhance their privileges.

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 relates to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to enhance their privileges using a specially crafted file...

10CVSS7.8AI score0.06363EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2019/11/13 12:0 a.m.68 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Nov 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

10CVSS5.8AI score0.28178EPSS
Exploits0References1
NVD
NVD
added 2019/11/12 7:15 p.m.27 views

CVE-2019-1449

A security feature bypass vulnerability exists in the way that Office Click-to-Run C2R components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would...

10CVSS9.5AI score0.06363EPSS
Exploits0References1
OSV
OSV
added 2019/11/12 7:15 p.m.6 views

CVE-2019-1449

A security feature bypass vulnerability exists in the way that Office Click-to-Run C2R components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would...

9.8CVSS7.3AI score0.06363EPSS
Exploits0References1
Prion
Prion
added 2019/11/12 7:15 p.m.22 views

Security feature bypass

A security feature bypass vulnerability exists in the way that Office Click-to-Run C2R components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would...

10CVSS9.3AI score0.06363EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/11/12 6:53 p.m.35 views

CVE-2019-1449

A security feature bypass vulnerability exists in the way that Office Click-to-Run C2R components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would...

9.5AI score0.06363EPSS
Exploits0References1
CVE
CVE
added 2019/11/12 6:53 p.m.99 views

CVE-2019-1449

CVE-2019-1449 describes a security feature bypass in Office Click-to-Run (C2R) where specially crafted files can escalate from a standard user to SYSTEM within LPAC Protected View. Affected is the Office C2R handling component; exploitation requires user to open a crafted file. The CVSSv3.1 base ...

10CVSS9.3AI score0.06363EPSS
Exploits0References1Affected Software2
Microsoft KB
Microsoft KB
added 2019/10/30 12:0 a.m.22 views

July 11, 2017, update for Office 2013 (KB3172545)

July 11, 2017, update for Office 2013 KB3172545 This article describes update 3172545 for Microsoft Office 2013 that was released on July 11, 2017. This update also applies to Office Home and Student 2013 RT. This update has a prerequisite. Be aware that the update in the Microsoft Download Cente...

6.6AI score
Exploits0
OpenVAS
OpenVAS
added 2019/10/09 12:0 a.m.89 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Oct 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS8.6AI score0.17876EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2019/09/11 12:0 a.m.30 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Sep 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS6.8AI score0.21805EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2019/08/14 12:0 a.m.288 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Aug 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.8CVSS6.4AI score0.0486EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2019/08/06 12:0 a.m.5 views

August 6, 2019, update for Office 2016 (KB3141456)

None None...

6.1AI score
Exploits0
OpenVAS
OpenVAS
added 2019/07/11 12:0 a.m.363 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jul 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS7AI score0.1316EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2019/06/12 12:0 a.m.170 views

Microsoft Office 365 (2016 Click-to-Run) Multiple RCE Vulnerabilities (Jun 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS7.5AI score0.06558EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2019/04/10 12:0 a.m.130 views

Microsoft Office 365 (2016 Click-to-Run) Multiple RCE Vulnerabilities (Apr 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS7.5AI score0.18515EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2019/02/14 12:0 a.m.48 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Feb 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS7AI score0.18414EPSS
Exploits0References8
Microsoft KB
Microsoft KB
added 2019/02/12 8:0 a.m.61 views

Description of the security update for Office 2013: February 12, 2019

Description of the security update for Office 2013: February 12, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following:...

9.3CVSS8.1AI score0.18414EPSS
Exploits0
OpenVAS
OpenVAS
added 2019/01/09 12:0 a.m.138 views

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jan 2019)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.3CVSS7.3AI score0.53202EPSS
Exploits4References3
Microsoft KB
Microsoft KB
added 2019/01/02 12:0 a.m.8 views

January 2, 2019, update for Office 2016 (KB4461435)

None None...

6.1AI score
Exploits0
Rows per page
Query Builder