Microsoft Project MPT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Project. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Description of the security update for SharePoint Server 2019: August 10, 2021 (KB5002000)

Description of the security update for SharePoint Server 2019: August 10, 2021 KB5002000 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see the Microsoft Common Vulnerabilities and Exposures CVE-2021-36940. Note: ...

The vulnerability of the Microsoft Project project management software and the Microsoft Office suite lies in the insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of the Microsoft Project project management software and the Microsoft Office suite is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

Microsoft Project 2010 Remote Code Execution Vulnerability (KB4484463)

This host is missing an important security update according to Microsoft KB4484463. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2020-1449

A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'...

CVE-2020-1449

A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'...

Remote code execution

A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'...

CVE-2020-1449

A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'...

CVE-2020-1449

CVE-2020-1449 is a remote code execution vulnerability in Microsoft Project caused by failing to check the source markup of a file. Public records show affected products include at least Project 2010, 2013, and 2016 variants, with the CVSSv3 base score variably cited (NVD lists 7.8 MED-HIGH; some...

Security Updates for Microsoft Project (July 2020)

The Microsoft Project installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file. An attacker wh...

Microsoft Project Information Disclosure Vulnerability

Microsoft Project is a suite of project management software from the American company Microsoft Microsoft. The software is used to assist project managers in developing plans, allocating resources to tasks, tracking progress, managing budgets and analyzing workloads. An information disclosure...

Microsoft Project 2010 Information Disclosure Vulnerability (KB4484387)

This host is missing an important security update according to Microsoft KB4484387 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Project 2016 Information Disclosure Vulnerability (KB4484399)

This host is missing an important security update according to Microsoft KB4484399 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Project 2013 Information Disclosure Vulnerability (KB4484369)

This host is missing an important security update according to Microsoft KB4484369 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2020-1322

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'...

CVE-2020-1322

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'...

Information disclosure

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'...

CVE-2020-1322

Microsoft Project information disclosure vulnerability (CVE-2020-1322) stems from an uninitialized variable causing out-of-bounds memory reads. Affected products seen in connected docs include Project 2013 and Project 2016. Microsoft released security updates on June 9, 2020 (KB4484369 for Projec...

CVE-2020-1322

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'...

Microsoft Project Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable. An attacker who successfully exploited the vulnerability could view out of bound memory that potentially could contain sensitive information. Exploitation of the...