4449 matches found
Security Feature Bypass Vulnerability for Microsoft Excel Products C2R (June 2020)
The Microsoft Excel Products is missing a security update, and Therefore is affected by a security feature bypass vulnerability. An attacker who exploited this vulnerability could cause a system to load remote images which could disclose the IP address of the targeted system to the attacker. C...
Security Updates for Microsoft Excel Products C2R (October 2019)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...
Security Updates for Microsoft Office Products C2R (September 2020)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the...
Security Updates for Microsoft Excel Products C2R (February 2020)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited t...
Security Updates for Microsoft Excel Products C2R (November 2021)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...
Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XLS...
The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Improper Restriction of XML External Entity Reference in Apache POI
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity XXE Processing...
GHSA-2JVJ-MHF2-G99W SilverStripe CSV Excel Macro Injection
In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software including Microsoft Excel. For example, the CSV data may contai...
Microsoft Excel 2013 Remote Code Execution Vulnerability (KB5002204)
This host is missing a critical security update according to Microsoft KB5002204 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Excel 2016 Remote Code Execution Vulnerability (KB5002196)
This host is missing a critical security update according to Microsoft KB5002196 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
CVE-2022-29110
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-29109
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-29110
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-29109
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-29110
Microsoft Excel Remote Code Execution Vulnerability...
Remote code execution
Microsoft Excel Remote Code Execution Vulnerability...
