Microsoft Excel Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Excel improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to explo...

MS16-148: Description of the security update for Excel 2010: December 13, 2016

MS16-148: Description of the security update for Excel 2010: December 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

Microsoft Excel Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Excel improperly checks registry settings when an attempt is made to run embedded content. An attacker who successfully exploited the vulnerability could execute arbitrary commands. In a file-sharing attack scenario, an attacker could...

Microsoft Excel Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Excel software when it improperly handles the parsing of file formats. The security feature bypass by itself does not allow arbitrary code execution. However, to successfully exploit the vulnerability, an attacker would have to use it in...

Microsoft Office CVE-2016-7265 Information Disclosure Vulnerability

Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2007 SP3 Microsoft Excel 2010 SP2 32-bit editions Microsoft Excel 2010 SP2 64-b...

Microsoft Office CVE-2016-7267 Security Bypass Vulnerability

Description Microsoft Office is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Excel 2010 Service Pack 2 32-bit editio...

Microsoft Office CVE-2016-7276 Information Disclosure Vulnerability

Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2016 for Mac Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service...

Microsoft Office CVE-2016-7263 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Microsoft Office CVE-2016-7264 Information Disclosure Vulnerability

Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2007 SP3 Microsoft Excel 2016 for Mac Microsoft Excel Viewer Microsoft Excel fo...

Microsoft Office Security Feature Bypass (MS16-148: CVE-2016-7267)

A security feature bypass exists in Microsoft Office. The vulnerability is due to an improper handling of an excel file. A remote attacker can exploit this vulnerability ,potentially leading to a security bypass...

PT-2016-3429 · Microsoft · Office Compatibility Pack +3

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer version not specified Description: The issue is related to insufficient input validation in Microsoft Excel, allowing an attacker to execute...

Microsoft Office CVE-2016-7266 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft Exc...

Microsoft Office Security Feature Bypass (MS16-148: CVE-2016-7262)

A security feature bypass vulnerability exists in Microsoft Excel. The vulnerability is due to an error in the way Microsoft Excel improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this vulnerability by enticing a victim to open a specially...

Microsoft Office CVE-2016-7262 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft Exc...

The vulnerability of Microsoft Word, the Microsoft Office Compatibility Pack, the Microsoft Office programs, and the Microsoft Excel spreadsheet editors allow a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office Compatibility Pack, Microsoft Office programs, and Microsoft Excel spreadsheet editors is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary cod...

Vulnerability of Microsoft Word, the Microsoft Office Web Apps suite, the Microsoft Office Compatibility Pack, the Microsoft Office suite, the Microsoft SharePoint Server corporate application suite, and the Microsoft Excel spreadsheet editor, allowing a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office Web Apps suite, the Microsoft Office Compatibility Pack suite, the Microsoft Office suite, the Microsoft SharePoint Server corporate application suite, and the Microsoft Excel spreadsheet editor is due to an operation that occurs outside o...

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer, and the Microsoft Excel spreadsheet editor allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer for electronic spreadsheet viewing, and the Microsoft Excel spreadsheet editor is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious...

Vulnerability of the Microsoft Office package, the Microsoft SharePoint Server corporate application package, the Word Viewer software for reading doc files, the Microsoft Office Web Apps package, the Microsoft Word text editor, the Microsoft Excel spreadsheet editor, and the Microsoft Office Compatibility Pack, which allows a perpetrator to cause service interruptions or obtain confidential information from process memory.

The vulnerabilities of the Microsoft Office suite, the Microsoft SharePoint Server enterprise application suite, the Word Viewer document viewer software, the Microsoft Office Web Apps suite, the Microsoft Word text editor, the Microsoft Excel spreadsheet editor, and the Microsoft Office...

The vulnerability of Microsoft Excel editors, along with the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as the Microsoft Office Compatibility Pack, is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted documen...

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft SharePoint Server corporate application suite allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft SharePoint Server corporate application suite arises from an operation that goes beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafte...