Vulnerability of Microsoft Office packages, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server: This vulnerability stems from operations that occur outside of the buffer in memory, allowing attackers to execute arbitrary code.

Packages such as Microsoft Office, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server are associated with operations that involve writing data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2024-48754)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

Microsoft SharePoint Code Execution Vulnerability (CNVD-2024-48755)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A code execution...

Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2024-48752)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2024-48753)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...

CVE-2024-49070

Microsoft SharePoint Remote Code Execution Vulnerability...

CVE-2024-49070

Microsoft SharePoint Remote Code Execution Vulnerability...

CVE-2024-49068

Microsoft SharePoint Elevation of Privilege Vulnerability...

CVE-2024-49062

Microsoft SharePoint Information Disclosure Vulnerability...

CVE-2024-49064

Microsoft SharePoint Information Disclosure Vulnerability...

CVE-2024-49068

Microsoft SharePoint Elevation of Privilege Vulnerability...

CVE-2024-49062

Microsoft SharePoint Information Disclosure Vulnerability...

CVE-2024-49064

Microsoft SharePoint Information Disclosure Vulnerability...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in their lack of access control mechanisms, which allows attackers to increase their privileges.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server’s software packages lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the improper limitation of XML references to external objects, which allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow an attacker to gain unauthorized acces...

CVE-2024-49062 Microsoft SharePoint Information Disclosure Vulnerability

...

CVE-2024-49062 Microsoft SharePoint Information Disclosure Vulnerability

...

CVE-2024-49062

CVE-2024-49062 is a Microsoft SharePoint Information Disclosure vulnerability affecting SharePoint components used in on-premises deployments. The issue is described in the initial entry with a CVSS v3.1 base score of 6.5 (NETWORK, Privileges Required: LOW, User Interaction: NONE) and indicates d...

CVE-2024-49070

CVE-2024-49070 is a Microsoft SharePoint remote code execution vulnerability. Public sources identify it as an RCE affecting SharePoint components and linked Office/SharePoint CVEs with a base score around 7.4 (HIGH) via CVSS 3.1, local exploit vector with no user interaction required according t...