CVE-2018-1547

IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output encoding in an CSV export. By persuading a victim to download the CSV export, to open it in Microsoft Excel and to confirm the two security...

CVE-2018-1547

IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output encoding in an CSV export. By persuading a victim to download the CSV export, to open it in Microsoft Excel and to confirm the two security...

The vulnerability of Microsoft Excel’s spreadsheet editor involves an operation where data is written beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file, from a remote location...

CVE-2016-10585

libxl provides Node bindings for the libxl library for reading and writing excel XLS and XLSX spreadsheets. libxl downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested zip file with an...

CVE-2016-10585

libxl provides Node bindings for the libxl library for reading and writing excel XLS and XLSX spreadsheets. libxl downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested zip file with an...

Remote code execution

libxl provides Node bindings for the libxl library for reading and writing excel XLS and XLSX spreadsheets. libxl downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested zip file with an...

CVE-2016-10585

CVE-2016-10585 affects libxl bindings for Node.js. The library downloads zipped resources over HTTP, enabling MITM attacks that could allow an attacker in a privileged network position to swap the downloaded zip with a malicious one, potentially causing remote code execution on the host running l...

The vulnerability of Microsoft Excel editors arises from errors in memory object processing, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...

The vulnerability of Microsoft Excel editors arises from errors in memory object processing, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...

The vulnerability of Microsoft Excel editors arises from errors in memory object processing, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file from a remote location...

Microsoft Office Multiple Remote Code Execution Vulnerabilities (May 2018) - Mac OS X

This host is missing an important security update for Microsoft Office 2016 on Mac OS X according to Microsoft security update May 2018 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

Security Update for Microsoft Office (May 2018) (macOS)

The Microsoft Office 2016 application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle...

Microsoft Office Excel Formula Record Type Confusion Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Microsoft Office Excel PtgName Out-Of-Bounds Access Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Vega Stealer Malware Takes Aim at Chrome, Firefox

A malware dubbed Vega Stealer has been uncovered, looking to make off with saved credentials and credit-card information in the Chrome and Firefox browsers. While it’s a simple payload for now, researchers said it has the ability to evolve into something more concerning in the future. Proofpoint,...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-10432)

Microsoft Excel 2010 SP2 and others are products of Microsoft Corporation.Microsoft Office 2010 SP2 is an office software suite product.Excel 2010 SP2 is a set of spreadsheet processing software in the Office suite. A remote code execution vulnerability exists in Microsoft Excel that stems from t...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-10433)

Microsoft Excel 2010 SP2 and others are products of Microsoft Corporation.Microsoft Office 2010 SP2 is an office software suite product.Excel 2010 SP2 is a set of spreadsheet processing software in the Office suite. A remote code execution vulnerability exists in Microsoft Excel that stems from t...

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel 2010 SP2, etc. are all products of Microsoft Corporation USA.Microsoft Excel 2010 SP2 is a set of spreadsheet processing software in the Office suite.Office 2016 Click-to-Run C2R is a set of office software suite products. An information disclosure vulnerability exists in Microsof...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-09655)

Microsoft Excel 2010 SP2, etc. are all products of Microsoft Corporation USA.Microsoft Excel 2010 SP2 is a set of spreadsheet processing software in the Office suite.Office 2016 Click-to-Run C2R is a set of office software suite products. A remote code execution vulnerability exists in Microsoft...

CVE-2018-8163

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Excel...