Security Updates for Microsoft Office (December 2020) (macOS)

The Microsoft Office product installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Excel Remote Code Execution Vulnerability CVE-2020-17123, CVE-2020-17128 - Microsoft Excel Information Disclosure Vulnerability CVE-2020-17126...

VulnCheck KEV: CVE-2018-8627

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus,...

VulnCheck KEV: CVE-2018-8598

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8627...

GHSA-523C-XH4G-MH5M Denial of Service in Apache POI

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: - Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294 - Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...

Microsoft Excel XLS File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XLS...

Combodo iTop Access Control Error Vulnerability

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management. Combodo iTop 2.8.0 version of the previous security...

Microsoft Excel 2016 Remote Code Execution Vulnerabilities (KB4493165)

This host is missing an important security update according to Microsoft KB4493165 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2013 Remote Code Execution Vulnerabilities (KB4493176)

This host is missing an important security update according to Microsoft KB4493176 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2010 Remote Code Execution Vulnerabilities (KB4493186)

This host is missing an important security update according to Microsoft KB4493186 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2021-1713

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2021-1713

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2021-1714

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2021-1714

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2020-4079

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 2.8.0, when the ajax endpoint for the "excel export" portal functionality is called directly it allows getting data without scope filtering. This allows a user to access data they which they should not have...

CVE-2021-1713

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2021-1714

Microsoft Excel Remote Code Execution Vulnerability...

Remote code execution

Microsoft Excel Remote Code Execution Vulnerability...

Remote code execution

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2021-1714 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2021-1714

CVE-2021-1714 is an Excel remote code execution vulnerability affecting Microsoft Excel (Office). The connected sources indicate a vulnerability in Excel with a CVSS v3.1 base score of 7.8 (HIGH) and an attack vector LOCAL requiring user interaction, with confidentiality, integrity, and availabil...