5929 matches found
Microsoft Office 安全漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. Microsoft Office has a code execution vulnerability that can be exploited by an attacker to execute arbitra...
WordPress Word Replacer Pro Plugin <= 1.0 is vulnerable to Broken Access Control
Software Word Replacer Pro Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-52229 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 214b09832f8e Credits thiennv Required privilege...
SUSE CVE-2023-50254
Deepin Linux's default document reader deepin-reader software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw that leads to remote command execution via crafted docx document. This is a file overwrite vulnerability. Remote code execution RCE can be achieved by...
Decoy Microsoft Word Documents Used to Deliver Nim-Based Malware
A new phishing campaign is leveraging decoy Microsoft Word documents as bait to deliver a backdoor written in the Nim programming language. "Malware written in uncommon programming languages puts the security community at a disadvantage as researchers and reverse engineers' unfamiliarity can hamp...
(0Day) Hancom Office Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
The vulnerability of Microsoft Word text editors, which allows attackers to disclose protected information
The vulnerability of Microsoft Word relates to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Microsoft Word Information Disclosure Vulnerability (CNVD-2025-17480)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Word, which can be exploited by attackers to obtain sensitive information...
Microsoft Word SKP File Parsing Use-After-Free Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...
Microsoft Word SKP File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...
Security Updates for Microsoft Word Products C2R (December 2023)
The Microsoft Word application installed on the remote host is missing a security update. It is, therefore, affected by an information disclosure vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
[SECURITY] Fedora 38 Update: libreoffice-7.5.9.2-1.fc38
LibreOffice is an Open Source, community-developed, office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office suites...
Microsoft Word SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP...
Microsoft Word 2016 Information Disclosure Vulnerability (KB5002520)
This host is missing a critical security update according to Microsoft KB5002520 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-36009
Microsoft Word Information Disclosure Vulnerability...
CVE-2023-36009
Microsoft Word Information Disclosure Vulnerability...
CVE-2023-36009
Microsoft Word Information Disclosure Vulnerability...
Information disclosure
Microsoft Word Information Disclosure Vulnerability...
CVE-2023-36009 Microsoft Word Information Disclosure Vulnerability
...
CVE-2023-36009
CVE-2023-36009 is a Microsoft Word information-disclosure vulnerability. Evidence in connected docs confirms Word/Office is affected and that public exploits exist. CVSS v3.1 base score 5.5 (Medium); attack vector is Local, with low attack complexity and user interaction required, potentially exp...
