Microsoft Project Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable. An attacker who successfully exploited the vulnerability could view out of bound memory that potentially could contain sensitive information. Exploitation of the...

Microsoft Information Disclosure Vulnerability (June 2020)

The Microsoft Project installation on the remote host is missing a security update. Therefore, An information disclosure vulnerability exists in Microsoft Project due to an uninitialized variable. An attacker could read out of bounds memory to disclose potentially sensitive information. C Tenable...

Security Updates for Microsoft Project Server (April 2020)

The Microsoft Project Server installation on the remote host is missing a security update. It is, therefore, affected by a cross-site-scripting XSS vulnerability. Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An...

Microsoft Project 2016 Remote Code Execution Vulnerability (KB4484269)

This host is missing an important security update according to Microsoft KB4484269 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Project 2013 Remote Code Execution Vulnerability (KB4484125)

This host is missing an important security update according to Microsoft KB4484125 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Project 2010 Remote Code Execution Vulnerability (KB4484132)

This host is missing an important security update according to Microsoft KB4484132 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Description of the security update for Project 2010: April 14, 2020

Description of the security update for Project 2010: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists when Microsoft Office improperly loads arbitrary type libraries. To learn more about the vulnerability, see Microsoft Common Vulnerabilities...

Microsoft Project RCE Vulnerability (April 2020)

The Microsoft Project installation on the remote host is missing a security update. Therefore, a remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data; or create new account...

MS15-116: Description of the security update for Project 2013: November 10, 2015

MS15-116: Description of the security update for Project 2013: November 10, 2015 Summary This security update resolves vulnerabilities in Microsoft Project 2013 that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these...

The vulnerabilities of Microsoft Office packages, Office 365, and the Microsoft Project project management software are due to insufficient validation of input data, allowing attackers to execute arbitrary commands.

The vulnerability of Microsoft Office packages, Office 365, and the Microsoft Project project management software exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to execute arbitrary commands using a specially created file...

Microsoft Project 2013 Security Feature Bypass Vulnerability (KB4464548)

This host is missing a critical security update according to Microsoft KB4464548 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Project 2010 Security Feature Bypass Vulnerability (KB4461631)

This host is missing an important security update according to Microsoft KB4461631 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Updates for Microsoft Project (September 2019)

The Microsoft Project installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability...

Security Update for Microsoft Project 2013 (KB4464548) 32-Bit Edition

A security vulnerability exists in Microsoft Project 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Project 2013 (KB4464548) 64-Bit Edition

A security vulnerability exists in Microsoft Project 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for Project 2013: September 10, 2019

Description of the security update for Project 2013: September 10, 2019 Summary This security update resolves a security feature bypass vulnerability that exists when Microsoft Office incorrectly handles input. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and...

Description of the security update for Project 2010: September 10, 2019

Description of the security update for Project 2010: September 10, 2019 Summary This security update resolves a security feature bypass vulnerability that exists when Microsoft Office incorrectly handles input. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and...

Microsoft Office CVE-2019-1264 Security Bypass Vulnerability

Description Microsoft Office is prone to a security bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions; this may aid in launching further attacks. Technologies Affected Microsoft Office 2010 Service Pack 2 32-bit editions Microsoft Office 2010 Servic...

Security Updates for Microsoft Project Server (June 2019)

The Microsoft Project Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an...

The vulnerability of the Microsoft Project project management software and the Office 365 suite, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Project project management software and the Office 365 suite arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...