1106 matches found
Vulnerabilities fixed in Microsoft Office
Vulnerabilities have been fixed in Microsoft Office. The vulnerabilities allow a malicious person to impersonate as another user, to execute arbitrary code under the user's privileges or obtain elevated privileges. To exploit the vulnerabilities marked CVE-2022-44690 and CVE-2022-44693 CVSS 8.8,...
KLA20121 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Office Graphics can be exploited remotely ...
PT-2022-6011
Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description The issue is related to a buffer overflow in memory, which can be exploited by an attacker to execute arbitrary code using specially crafted DXF and DWG files. Recommendations ...
PT-2022-5971
Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description The issue is related to a use-after-free vulnerability in Microsoft Office Visio, which can be exploited by using a specially crafted DWG file. This can allow an attacker to...
CVE-2022-44696
CVE-2022-44696 is a Microsoft Office Visio Remote Code Execution vulnerability affecting Visio components across multiple Office/Visio editions. The provided documents indicate potential arbitrary code execution with a LOCAL exploit vector and USER INTERACTION REQUIRED (CVSS v3.1: AV:L/AC:L/PR:N/...
CVE-2022-44694 Microsoft Office Visio Remote Code Execution Vulnerability
...
CVE-2022-44696: Undefined Security Weakness
Microsoft Office Visio Remote Code Execution Vulnerability...
CVE-2022-44695: Undefined Security Weakness
Microsoft Office Visio Remote Code Execution Vulnerability...
CVE-2022-44694
Technical details about CVE-2022-44694 are not publicly provided in the supplied documents. Monitor official advisories and follow up for specific impact, affected products, and patch guidance as more information becomes available.
PT-2022-5969
Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Office Visio, which can be exploited by an attacker to execute arbitrary code using a specially crafted DWG...
CVE-2022-44695
Technical details about CVE-2022-44695 are not publicly provided in the supplied connected documents. Available items reference the CVE and notes about Visio remote code execution and December 2022 updates, but do not specify affected versions, root cause, or fixes.
CVE-2022-44696 Microsoft Office Visio Remote Code Execution Vulnerability
...
CVE-2022-44695 Microsoft Office Visio Remote Code Execution Vulnerability
...
CVE-2022-44694: Undefined Security Weakness
Microsoft Office Visio Remote Code Execution Vulnerability...
The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, which stems from insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening a specially created file...
Microsoft Office Visio EMF File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...
Security Updates for Microsoft Visio Products C2R (September 2022)
The Microsoft Visio Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Remote code execution vulnerabilities. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-27963, CVE-2022-38010 Note...
Microsoft Visio 2016 Security Feature Bypass Vulnerability (KB5002016)
This host is missing an important security update according to Microsoft KB5002016. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Visio 2013 SP1 Security Feature Bypass Vulnerability (KB5002017)
This host is missing an important security update according to Microsoft KB5002017. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
