Lucene search
+L

1039 matches found

NCSC
NCSC
added 2022/12/13 12:0 a.m.36 views

Vulnerabilities fixed in Microsoft Office

Vulnerabilities have been fixed in Microsoft Office. The vulnerabilities allow a malicious person to impersonate as another user, to execute arbitrary code under the user's privileges or obtain elevated privileges. To exploit the vulnerabilities marked CVE-2022-44690 and CVE-2022-44693 CVSS 8.8,...

8.8CVSS7.4AI score0.79689EPSS
SaveExploits0
CVE
CVE
added 2022/12/13 12:0 a.m.117 views

CVE-2022-44695

Technical details about CVE-2022-44695 are not publicly provided in the supplied connected documents. Available items reference the CVE and notes about Visio remote code execution and December 2022 updates, but do not specify affected versions, root cause, or fixes.

7.8CVSS7.8AI score0.00822EPSS
SaveExploits0References1Affected Software4
Kaspersky
Kaspersky
added 2022/12/13 12:0 a.m.254 views

KLA20121 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Office Graphics can be exploited remotely ...

8.8CVSS8.9AI score0.79689EPSS
SaveExploits0References24
CVE
CVE
added 2022/12/13 12:0 a.m.97 views

CVE-2022-44694

Technical details about CVE-2022-44694 are not publicly provided in the supplied documents. Monitor official advisories and follow up for specific impact, affected products, and patch guidance as more information becomes available.

7.8CVSS7.8AI score0.00726EPSS
SaveExploits0References1Affected Software3
Positive Technologies
Positive Technologies
added 2022/12/13 12:0 a.m.1 views

PT-2022-5969

Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Office Visio, which can be exploited by an attacker to execute arbitrary code using a specially crafted DWG...

7.8CVSS7.7AI score0.00726EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2022/12/13 12:0 a.m.3 views

PT-2022-5971

Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description The issue is related to a use-after-free vulnerability in Microsoft Office Visio, which can be exploited by using a specially crafted DWG file. This can allow an attacker to...

7.8CVSS7AI score0.00822EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2022/12/13 12:0 a.m.8 views

Microsoft Office Visio 安全漏洞

Microsoft Office Visio is responsible for drawing flowcharts and schematic diagrams in the Office software series of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Office Visio, which can be exploited by an attacker to execute arbitrary code on...

7.8CVSS8.4AI score0.00822EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2022/12/13 12:0 a.m.30 views

CVE-2022-44694 Microsoft Office Visio Remote Code Execution Vulnerability

...

7.8CVSS8AI score0.00726EPSS
SaveExploits0References1
CVE
CVE
added 2022/12/13 12:0 a.m.99 views

CVE-2022-44696

CVE-2022-44696 is a Microsoft Office Visio Remote Code Execution vulnerability affecting Visio components across multiple Office/Visio editions. The provided documents indicate potential arbitrary code execution with a LOCAL exploit vector and USER INTERACTION REQUIRED (CVSS v3.1: AV:L/AC:L/PR:N/...

7.8CVSS7.8AI score0.00822EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2022/12/13 12:0 a.m.38 views

CVE-2022-44695 Microsoft Office Visio Remote Code Execution Vulnerability

...

7.8CVSS8AI score0.00822EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/10/10 12:0 a.m.9 views

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, which stems from insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening a specially created file...

7.8CVSS7.8AI score0.00856EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2022/09/19 12:0 a.m.27 views

Microsoft Office Visio EMF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS5.6AI score0.0103EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/09/15 12:0 a.m.291 views

Security Updates for Microsoft Visio Products C2R (September 2022)

The Microsoft Visio Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Remote code execution vulnerabilities. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-27963, CVE-2022-38010 Note...

7.8CVSS7.9AI score0.0103EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2022/09/14 12:0 a.m.20 views

Microsoft Visio 2013 SP1 Security Feature Bypass Vulnerability (KB5002017)

This host is missing an important security update according to Microsoft KB5002017. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.8CVSS7.5AI score0.00856EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/09/14 12:0 a.m.19 views

Microsoft Visio 2016 Security Feature Bypass Vulnerability (KB5002016)

This host is missing an important security update according to Microsoft KB5002016. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.8CVSS7.5AI score0.00856EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/13 7:15 p.m.4 views

CVE-2022-37963

Microsoft Office Visio Remote Code Execution Vulnerability...

7.8CVSS7.4AI score0.0103EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/13 7:15 p.m.26 views

CVE-2022-38010

Microsoft Office Visio Remote Code Execution Vulnerability...

7.8CVSS0.00856EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/13 7:15 p.m.0 views

CVE-2022-38010

Microsoft Office Visio Remote Code Execution Vulnerability...

7.8CVSS5.9AI score0.00856EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/13 7:15 p.m.26 views

CVE-2022-37963

Microsoft Office Visio Remote Code Execution Vulnerability...

7.8CVSS0.0103EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/13 7:15 p.m.13 views

CVE-2022-37963

Microsoft Office Visio Remote Code Execution Vulnerability...

7.8CVSS5.9AI score0.0103EPSS
SaveExploits0References3Affected Software3
Rows per page
Query Builder