CVE-2023-36560

ASP.NET Security Feature Bypass Vulnerability...

CVE-2023-36413

Microsoft Office Security Feature Bypass Vulnerability...

CVE-2023-36037

Microsoft Excel Security Feature Bypass Vulnerability...

CVE-2023-36021

Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability...

Security feature bypass

Windows SmartScreen Security Feature Bypass Vulnerability...

CVE-2023-36021 Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability

...

CVE-2023-36021 Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability

...

CVE-2023-36021

CVE-2023-36021 affects Microsoft On-Prem Data Gateway and is described as a security feature bypass. The provided documents do not include concrete technical details (root cause, affected versions, exploit vectors, or specific fixes). CVSSv3 metrics in the Initial document indicate a high-severit...

CVE-2023-36037 Microsoft Excel Security Feature Bypass Vulnerability

...

CVE-2023-36037

CVE-2023-36037 is a Microsoft Excel security feature bypass vulnerability. Public sources label it as a high-severity, local-access issue with high impact to confidentiality, integrity, and availability (CVSSv3.1: AV=L, AC=L, PR=None, UI=Required, S=U, C/H/I/A=H). Exploitation status is not discl...

CVE-2023-36413 Microsoft Office Security Feature Bypass Vulnerability

...

CVE-2023-36413

CVE-2023-36413: Microsoft Office security feature bypass vulnerability. Affects Office components (notably Office 2016-era products in references) and can bypass Protected View, allowing opened files to enter editing mode when delivered as a malicious file. Underlying risk is an I: HIGH impact (i...

CVE-2023-36560

CVE-2023-36560 corresponds to an ASP.NET security feature bypass in the .NET Framework. The core details from the provided documents show a high-severity vulnerability (CVSS 3.1: 8.8) affecting .NET Framework/ASP.NET components, with potential impact on confidentiality, integrity, and availabilit...

CVE-2023-36560 ASP.NET Security Feature Bypass Vulnerability

...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-36033 Microsoft Windows Desktop Window Manager DWM Core Library Privilege Escalation Vulnerability CVE-2023-36025 Microsoft Windows SmartScreen Security...

ASP.NET Security Feature Bypass Vulnerability

...

Security Updates for Microsoft Office Products (Nov 2023) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the november-14-2023 advisory. - Microsoft Excel Security Feature Bypass Vulnerability CVE-2023-36037 - Microsoft Excel Remote Code Execution Vulnerability CVE-2023-36041 ...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A security feature bypass vulnerability exists in Microsoft Office, which can be exploited by attackers to...

PT-2023-6975 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Excel, which can be exploited by opening a specially crafted malicious file. This allows an attacker to bypass securit...

VulnCheck KEV: CVE-2023-36025

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts...