PT-2020-5257 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary code. This can be exploited by remote attackers, potentially leading to the execution ...

Microsoft Excel 资源管理错误漏洞

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to achieve remote code execution...

Microsoft Excel 安全漏洞

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to achieve remote code execution...

PT-2020-5256 · Microsoft · Office Excel +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the code of Microsoft products, specifically allowing remote attackers to execute...

Microsoft Excel 信息泄露漏洞

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. An information disclosure vulnerability exists in Microsoft Excel. No detailed vulnerability details are provided at this time...

PT-2020-5238 · Microsoft · Office Web Apps +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft 365 Apps for...

Microsoft Office ElementType code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in Excel as part of Microsoft Office 365 ProPlus x86, version 2002, build 12527.20988. A specially crafted XLS file can cause a use-after-free condition, resulting in remote code execution. An attacker needs to provide a malformed file to...

Microsoft Excel 安全漏洞

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to achieve remote code execution...

Microsoft Excel 安全漏洞

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to achieve remote code execution...

Security Updates for Microsoft Excel Products (December 2020)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2020-17123, CVE-2020-17125,...

PT-2020-5259 · Microsoft · Office Web Apps +3

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issu...

Microsoft Excel 授权问题漏洞

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A security feature bypass vulnerability exists in Microsoft Excel, no details of the vulnerability are provided at this time...

Microsoft Excel 安全漏洞

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to achieve remote code execution...

KLA12023 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code...

CVE-2017-2910

An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...

ChurchCRM 4.2.0 CSV Injection

Exploit Title: ChurchCRM 4.2.1- CSV/Formula Injection Date: 2020- 10- 24 Exploit Author: Mufaddal Masalawala Vendor Homepage: https://churchcrm.io/ Software Link: https://github.com/ChurchCRM/CRM Version: 4.2.0 Payload: =10+20+cmd|' /C calc'!A0 Tested on: Kali Linux 2020.3 Proof Of Concept: CSV...

Tendenci 12.3.1 - CSV/ Formula Injection

Exploit Title: Tendenci 12.3.1 - CSV/ Formula Injection Date: 2020-10-29 Exploit Author: Mufaddal Masalawala Vendor Homepage: https://www.tendenci.com/ Software Link: https://github.com/tendenci/tendenci Version: 12.3.1 Payload: =10+20+cmd|' /C calc'!A0 Tested on: Kali Linux 2020.3 Proof Of...

December 1, 2020, update for Office 2016 (KB4486716)

None None...

The vulnerability of Microsoft Excel’s spreadsheet editor, related to errors in memory object handling, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Excel editors, related to errors in code generation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to errors in code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...