CVE-2020-17020

Microsoft Word Security Feature Bypass Vulnerability...

EUVD-2020-12098

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...

PT-2020-4026 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: A remote code execution issue exists in Microsoft Word software due to its failure to properly handle objects in memory. This could allow an attacker to use a specially crafted file ...

The vulnerability of Microsoft Word’s text editor, related to errors in memory object handling, allows attackers to exploit this to disclose protected information.

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the software...

Microsoft Word Information Disclosure Vulnerability (CNVD-2020-49005)

Microsoft Office is an office software suite.Microsoft SharePoint is an enterprise business collaboration platform.Microsoft Word is a word processing software in the Office suite.Microsoft Office is an office software suite.Microsoft SharePoint is an enterprise business collaboration...

CVE-2020-1502

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-11034)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle memory objects, and can be exploited by an attacker with a specially...

PT-2020-3819 · Microsoft · Office +3

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Microsoft Office affected versions not specified Microsoft Office Online Server affected versions not specified SharePoint Server affected versions not specified Description: An information...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-11035)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle objects in memory, and can be exploited by an attacker with the help...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

PoC exploit for CVE-2017-11826, a Microsoft Office Word vulnerability allowing arbitrary code execution through DDE injection. The exploit targets Microsoft Office Word, specifically the vulnerability class of remote code execution RCE via DDE Dynamic Data Exchange injection. The probable entry...

CVE-2020-1446

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-24069)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle memory objects, and can be exploited by an attacker with the help of...

Description of the security update for Office 2010: April 14, 2020

Description of the security update for Office 2010: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if it does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common...

Coronavirus-Themed APT Attack Spreads Malware

An advanced persistent threat APT group is leveraging the coronavirus pandemic to infect victims with a previously unknown malware, in a recently discovered campaign that researchers call “Vicious Panda.” Researchers identified two suspicious Rich Text Format files RTF — a text file format used b...

Microsoft Word and Microsoft Outlook Buffer Overflow Vulnerability

Microsoft Word and Microsoft Outlook are both products of Microsoft Corporation.Microsoft Word is a set of word processing software in the Office suite.Microsoft Outlook is a set of e-mail applications. Microsoft Word and Microsoft Outlook have security vulnerabilities. An attacker could exploit...

The vulnerability of Microsoft Word’s text editor lies in memory object processing errors, which allow attackers to execute arbitrary code.

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2019-3013 · Microsoft · Outlook 2016 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: A remote code execution issue exists in Microsoft Word software due to its failure to properly handle objects in memory. This could allow an attacker to use a specially crafted file ...

Microsoft Word Code Execution Vulnerability (CNVD-2025-17496)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

CVE-2019-1035

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...

The vulnerability of Microsoft Word’s text editor lies in memory object processing errors, which allow attackers to execute arbitrary code.

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...