CVE-2018-0795

CVE-2018-0795 affects Office 2010/2013/2016; memory handling of in-memory objects enables remote code execution. Root cause: memory corruption in Office components when processing crafted files, per multiple sources. Impact: remote code execution with the attacker gaining the privileges of the cu...

CVE-2018-0806

CVE-2018-0806 concerns the Equation Editor in Microsoft Office (2010–2016 and earlier Office versions listed) allowing remote code execution due to how objects are handled in memory. The description notes this vulnerability as distinct from other nearby CVEs (CVE-2018-0804/0805/0807). The connect...

CVE-2018-0794

Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-07...

CVE-2018-0807

Technical details about CVE-2018-0807 are not provided in the connected documents; public information is limited to a remote code execution context in Office Equation Editor. Monitor for updates.

CVE-2018-0805

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

CVE-2018-0804

The CVE-2018-0804 entry concerns a remote code execution in the Equation Editor of Microsoft Office 2003–2016 due to the way in-memory objects are handled. Affected software includes Office 2003, 2007, 2010, 2013, and 2016; the root cause is improper handling of objects in memory within the Equat...

CVE-2018-0792

Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0794...

Microsoft Word Remote Code Execution Vulnerability

Microsoft Office 2016 is an office software suite product developed by Microsoft Corporation USA.Word 2016 is one of the word processing software packages. A remote code execution vulnerability exists in Word 2016 in Microsoft Office 2016 that stems from the program failing to properly handle...

Security Updates for Microsoft Office Products (January 2018)

The Microsoft Office Products are missing security updates. It is, therefore, affected by the following vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploite...

Microsoft Office Defense in Depth Update And Remote Code Execution Vulnerability (KB4011636)

This host is missing an important security update according to Microsoft KB4011636 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel 2016 RCE Vulnerability (KB4011627)

This host is missing an important security update according to Microsoft KB4011627 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office Word Multiple Vulnerabilities (KB4011651)

This host is missing a critical security update according to Microsoft KB4011651. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Word 2007 Service Pack 3 Multiple Vulnerabilities (KB4011657)

This host is missing a critical security update according to Microsoft KB4011657 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office 2016 Remote Code Execution Vulnerability (KB4011632)

This host is missing an important update for Microsoft Office Suite according to Microsoft security update KB4011632. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Excel 2010 Service Pack 2 RCE Vulnerability (KB4011660)

This host is missing an important security update according to Microsoft KB4011660 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4011606)

This host is missing an important security update according to Microsoft KB4011606 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Word 2016 Multiple Remote Code Execution Vulnerabilities (KB4011643)

This host is missing a critical security update according to Microsoft KB4011643 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

PT-2018-1027

Name of the Vulnerable Software and Affected Versions Microsoft Office 2007 Microsoft Office 2010 Microsoft Office 2013 Microsoft Office 2016 Microsoft Office Compatibility Pack affected versions not specified Microsoft WordPad affected versions not specified Description A remote code execution...