Microsoft Excel Buffer Overflow Vulnerability (CNVD-2020-45184)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A buffer overflow vulnerability exists in Microsoft Excel 365 Apps for Enterprise, which arises from the program not properly handling memory objects. An attacker could exploit the vulnerability to run...

Microsoft Office Multiple Vulnerabilities (Jul 2020) - Mac OS X

This host is missing an important security update for Microsoft Office 2016 and Office 2019 on Mac OS X according to Microsoft security updates July 2020 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

FreeXL: Multiple vulnerabilities

Background FreeXL is an open source library to extract valid data from within an Excel .xls spreadsheet. Description Multiple vulnerabilities have been discovered in FreeXL. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jul 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PT-2020-3820 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run...

The vulnerability of Microsoft Excel office programs relates to errors in memory object handling, which allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel office programs is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-1240

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'...

Remote code execution

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'...

Please Stop Managing Vulnerabilities in Excel Spreadsheets

Do your best Excel users work in application security? Are you trying to manage thousands of vulnerabilities across hundreds of applications in an increasingly elaborate series of Excel spreadsheets? Most companies are using multiple scanning technologies as well as a variety of manual testing...

CVE-2020-1240

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'...

CVE-2020-1240

CVE-2020-1240 is confirmed as a Microsoft Excel RCE vulnerability. Affected product: Microsoft Excel. Root cause: improper handling of objects in memory, leading to remote code execution. Impact: an attacker could run arbitrary code in the context of the current user; administrative rights would ...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

July 7, 2020, update for Excel 2016 (KB4484437)

None None...

The vulnerability of Microsoft Office packages, Microsoft Office for Mac, Microsoft 365 Apps for Enterprise, and Microsoft Excel relates to improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, Microsoft Office for Mac, Microsoft 365 Apps for Enterprise, and Microsoft Excel are related to incorrect handling of objects in memory. Exploiting these vulnerabilities can allow an attacker to execute arbitrary code using a specially created fil...

Hakbit Ransomware Attack Uses GuLoader, Malicious Microsoft Excel Attachments

A ransomware campaign, dubbed Hakbit, is targeting mid-level employees across Austria, Switzerland and Germany with malicious Excel attachments delivered via the popular email provider GMX. The spear-phishing based campaign is low volume and so far targeted the pharmaceutical, legal, financial,...

The vulnerability of Microsoft Excel editors, as well as Microsoft Office products and Office 365, is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code.

The vulnerability of Microsoft Excel editors, as well as Microsoft Office products and Office 365, is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Threat Source newsletter for June 11, 2020

Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. We are back this week with new content, mainly around Microsoft Patch Tuesday. We have our complete breakdown of all the vulns here, as well as in-depth information on two remote code execution vulnerabilities one of our researche...

Vulnerability Spotlight: Two code execution vulnerabilities in Microsoft Excel

Marcin “Icewall” Noga of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos researchers recently discovered two code execution vulnerabilities in Microsoft Excel. Microsoft released updates for these two bugs as part of their Patch Tuesday security update this week. Bo...

Microsoft Patch Tuesday, June 2020 Edition

Microsoft today released software patches to plug at least 129 security holes in its Windows operating systems and supported software, by some accounts a record number of fixes in one go for the software giant. None of the bugs addressed this month are known to have been exploited or detailed pri...

Microsoft Office Excel PivotField code execution vulnerability

Summary An exploitable use-after-free vulnerability exists in Excel application of Microsoft Office Professional Plus 2016 x86, version 2002, build 12527.20242 and Microsoft Office 365 ProPlus x86, version 1908, build 11929.20606. A specially crafted XLS file can cause a use after free condition,...