Lucene search
+L

34 matches found

CNNVD
CNNVD
added 2026/05/12 12:00 a.m.17 views

Microsoft Office ClickToRun 资源管理错误漏洞

Microsoft Office ClickToRun is a component developed by Microsoft Corporation that allows for the download and installation of Microsoft Office products. There is a resource management vulnerability in Microsoft Office ClickToRun. Attackers can exploit this vulnerability to gain higher privileges...

7.8CVSS5.8AI score0.00254EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/06/20 12:00 a.m.17 views

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the incorrect limitation of file names and other resources, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise is related to incorrect restrictions on file names and other resources. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

7.8CVSS5.8AI score0.00552EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:00 a.m.16 views

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...

7.8CVSS8.5AI score0.00633EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:00 a.m.15 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.4AI score0.00585EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:00 a.m.16 views

The vulnerability of the Microsoft Outlook client for Microsoft Office programs and 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Outlook client and Microsoft Office programs, as well as 365 Apps for Enterprise, is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00495EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/28 12:00 a.m.14 views

The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages lies in the fact that they allow the loading of unreliable external data alongside reliable data. This allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Office, Word, and 365 Apps for Enterprise packages lies in the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

7.6CVSS7.5AI score0.00443EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.15 views

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00732EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:00 a.m.13 views

The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00685EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/14 12:00 a.m.14 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00685EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:00 a.m.14 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00827EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:00 a.m.24 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00767EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:00 a.m.17 views

The vulnerability of the Microsoft Office package, Microsoft 365 Apps for Enterprise, and the Microsoft Outlook email client relates to the use of an uninitialized resource, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office package, Microsoft 365 Apps for Enterprise, and the Microsoft Outlook email client is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious individual to execute arbitrary code...

6.7CVSS8.1AI score0.00567EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:00 a.m.11 views

Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel, related to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.01124EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/17 12:00 a.m.15 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.00769EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.7 views

PT-2024-7214 · Microsoft · 365 Apps For Enterprise +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to the use of an insecure search path in Microsoft Office and Microsoft 365 Apps for Enterpri...

7.8CVSS7.2AI score0.00774EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.5 views

PT-2024-6768 · Microsoft · 365 Apps For Enterprise +3

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specified...

7.8CVSS8.1AI score0.065EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:00 a.m.20 views

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, related to access control errors, allows a perpetrator to perform arbitrary actions.

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to access control errors. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...

7.8CVSS5.8AI score0.00595EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/07 12:00 a.m.12 views

The vulnerability of Microsoft 365 Apps for Enterprise and Microsoft Office, related to a memory reclamation error, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise and Microsoft Office relates to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS8.2AI score0.00993EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/12 12:00 a.m.12 views

Microsoft Outlook Security Vulnerability

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Office Outlook. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and editions are affected:Microsoft Office...

6.5CVSS9AI score0.17697EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/05/15 12:00 a.m.14 views

Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, and Microsoft Office Online Server packages, allowing a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, and Microsoft Office Online Server relates to the execution of operations outside of the buffer in memory. Exploitation of this vulnerability can allow an attacker to execute arbitrary...

7.8CVSS8.1AI score0.00705EPSS
SaveExploits0References2
Rows per page
Query Builder