5929 matches found
Information disclosure
Microsoft Word Information Disclosure Vulnerability...
Remote code execution
Microsoft Word Remote Code Execution Vulnerability...
CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability
...
CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability
...
CVE-2023-36761
CVE-2023-36761 is a Microsoft Word information disclosure vulnerability. Connected sources note exploitation in the wild and indicate NTLM relay as a possible attack outcome. Affected products include various Word/Office deployments (Microsoft Word/Office suite). The vulnerability is being tracke...
CVE-2023-36762 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2023-36762
CVE-2023-36762 is a Microsoft Word remote code execution vulnerability. The available documents confirm an impact on Word and related Word components, with an exploit path requiring user interaction and local access (CVSS 3.1: AV=L, AC=L, PR=None, UI=Required, C/H/I/H/A=L). Public details note po...
CVE-2023-36762 Microsoft Word Remote Code Execution Vulnerability
...
CISA Adds Two Known Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability CVE-2023-36802 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability These types of...
Sophisticated Phishing Campaign Deploying Agent Tesla, OriginBotnet, and RedLine Clipper
A sophisticated phishing campaign is using a Microsoft Word document lure to distribute a trifecta of threats, namely Agent Tesla, OriginBotnet, and RedLine Clipper, to gather a wide range of information from compromised Windows machines. "A phishing email delivers the Word document as an...
Description of the security update for SharePoint Enterprise Server 2016: September 12, 2023 (KB5002494)
None None...
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: September 12, 2023 (KB5002501)
None None...
Microsoft Word Remote Code Execution Vulnerability
...
End of support for Office 2016 and Office 2019
None None...
End of support for Office 2013
End of support for Office 2013 Support for Office 2013 ended on April 11, 2023 and there will be no extension and no extended security updates. All of your Office 2013 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks.Buy or try...
Microsoft Word Information Disclosure Vulnerability
...
CVE-2023-4887
The Google Maps Plugin by Intergeo for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'intergeo' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
Microsoft Word 安全漏洞
Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Word, which can be exploited by attackers to obtain sensitive information...
Microsoft Office 安全漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security feature bypass vulnerability exists in Microsoft Office, which can be exploited by attacker...
Security Updates for Microsoft Word Products (September 2023)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2023-36761 - A remote code execution vulnerability. An...