Lucene search
+L

1039 matches found

CVE
CVE
added 2023/01/10 12:0 a.m.128 views

CVE-2023-21741

CVE-2023-21741 affects Microsoft Office Visio. Description: Information disclosure vulnerability in Visio; attacker could obtain sensitive memory data and use it for further attacks. Reported metrics show CVSS 3.1 base score 7.1 (HIGH) with: Attack Vector NETWORK, Attack Complexity LOW, Privilege...

7.1CVSS6.7AI score0.01793EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
added 2023/01/10 12:0 a.m.31 views

CVE-2023-21738 Microsoft Office Visio Remote Code Execution Vulnerability

...

7.8CVSS8AI score0.00696EPSS
SaveExploits0References1
CVE
CVE
added 2023/01/10 12:0 a.m.170 views

CVE-2023-21736

CVE-2023-21736 is a remote code execution vulnerability in Microsoft Office Visio (part of the Office suite). Connected sources confirm it enables arbitrary code execution and is addressed by Microsoft security updates. The CNVD/ENISA/NCSC entries categorize it as a Visio remote code execution is...

7.8CVSS7.8AI score0.00723EPSS
SaveExploits0References1Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.9 views

The vulnerability of the Microsoft Visio graphical editor relates to writing beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Visio graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created DXF and DWG files...

7.8CVSS7.9AI score0.00822EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2022/12/23 12:0 a.m.8 views

The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise, related to memory usage after it is freed, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created DWG file...

7.8CVSS7AI score0.00822EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/12/23 12:0 a.m.14 views

The vulnerability of Microsoft Visio’s graphical editor lies in the insufficient validation of input data, which allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Visio’s graphical editor is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created DWG file...

7.8CVSS7.7AI score0.00726EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2022/12/21 12:0 a.m.36 views

Security Updates for Microsoft Visio Products (December 2022)

The Microsoft Visio Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

7.8CVSS8.4AI score0.00822EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/12/19 12:0 a.m.76 views

Microsoft Office Visio Remote Code Execution Vulnerability (CNVD-2022-89422)

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system. Microsoft Office Visio is vulnerable to remote code execution. An attacker could exploit the vulnerability to execute code on the target host...

7.8CVSS3.5AI score0.00822EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/12/19 12:0 a.m.49 views

Microsoft Office Visio Remote Code Execution Vulnerability (CNVD-2022-89424)

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system. Microsoft Office Visio is vulnerable to remote code execution. An attacker could exploit the vulnerability to execute code on the target host...

7.8CVSS3.5AI score0.00726EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/15 12:0 a.m.29 views

Microsoft Office Visio DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.2AI score0.00726EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/15 12:0 a.m.45 views

Microsoft Office Visio DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.2AI score0.00822EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/12/15 12:0 a.m.32 views

Microsoft Office Visio Remote Code Execution Vulnerability (CNVD-2023-85906)

Microsoft Office Visio is responsible for drawing flowcharts and schematic diagrams in the Office software series of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Office Visio, which can be exploited by an attacker to execute arbitrary code on...

7.8CVSS8.2AI score0.00822EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/15 12:0 a.m.31 views

Microsoft Office Visio DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.5AI score0.00726EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/15 12:0 a.m.31 views

Microsoft Office Visio DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.5AI score0.00726EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/15 12:0 a.m.37 views

Microsoft Office Visio DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.2AI score0.00822EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/15 12:0 a.m.32 views

Microsoft Office Visio DWG File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS2.7AI score0.00822EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/12/14 12:0 a.m.117 views

Security Updates for Microsoft Visio Products C2R (December 2022)

The Microsoft Visio Products are missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable,...

7.8CVSS7.6AI score0.00822EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/12/14 12:0 a.m.21 views

Microsoft Visio 2016 Security Feature Bypass Vulnerability (KB5002286)

This host is missing an important security update according to Microsoft KB5002286. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.8CVSS7.5AI score0.00822EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/12/14 12:0 a.m.20 views

Microsoft Visio 2013 SP1 Security Feature Bypass Vulnerability (KB5002280)

This host is missing an important security update according to Microsoft KB5002280. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.8CVSS7.5AI score0.00822EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/13 7:15 p.m.1 views

CVE-2022-44694

Microsoft Office Visio Remote Code Execution Vulnerability...

7.8CVSS5.9AI score0.00726EPSS
SaveExploits0References1
Rows per page
Query Builder