CVE-2021-27058

CVE-2021-27058 affects the Microsoft Office ClickToRun component. The provided documents identify a remote code execution vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), attack vector LOCAL, requires user interaction, and an impact on confidentiality, integrity, and availability. The exa...

CVE-2021-27058: Undefined Security Weakness

Microsoft Office ClickToRun Remote Code Execution Vulnerability...

Microsoft Office ClickToRun Remote Code Execution Vulnerability

...

Microsoft Office ClickToRun security vulnerability

Microsoft Office ClickToRun is a component of Microsoft Corporation USA for downloading and installing Microsoft Office products. A security vulnerability exists in Microsoft Office ClickToRun. The following products and versions are affected: Microsoft 365 Apps for Enterprise for 32-bit Systems,...

Microsoft Office ClickToRun Security Feature Bypass Vulnerability

Microsoft Office ClickToRun is a component of Microsoft Corporation USA for downloading and installing Microsoft Office products. A security vulnerability exists in the way files are handled in the Microsoft Office ClickToRun component. An attacker could exploit the vulnerability to elevate...

Microsoft Office ClickToRun Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the way that Office Click-to-Run C2R components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM. To exploit this bug, an attacker would...

KLA11604 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure...

Microsoft Office ClicktoRun Detection (Windows SMB Login)

Detects the installed version of Microsoft Office ClicktoRun on Windows. The script logs in via smb, searches for SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...