5860 matches found
End of support for Office 2016 and Office 2019
None None...
Description of the security update for SharePoint Enterprise Server 2016: January 11, 2022 (KB5002118)
None None...
PT-2022-1706 · Microsoft · Office Word +1
Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Word. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the...
Microsoft Word 代码注入漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
KLA12414 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary...
Security Updates for Microsoft Word Products (January 2022)
The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21842 %NASLMINLEVEL 70300 C...
AZL-8514 CVE-2022-22844 affecting package libtiff for versions less than 4.3.0-2
LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tifunix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field...
GHSA-F8M6-H2C7-8H9X Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)
Impact The vulnerability is present in PunktSentenceTokenizer, senttokenize and wordtokenize. Any users of this class, or these two functions, are vulnerable to a Regular Expression Denial of Service ReDoS attack. In short, a specifically crafted long input to any of these vulnerable functions wi...
The vulnerability of Microsoft Office packages, Microsoft Word, and Microsoft 365 Apps for Enterprise lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft Word, and Microsoft 365 Apps for Enterprise is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
DEBIAN-CVE-2021-43854
NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...
Exploit for Path Traversal in Microsoft
Microsoft-Office-Word-MSHTML-Remote-Code-Exe...
Microsoft Office 代码注入漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. An attacker can exploit this...
Microsoft Office Word MSHTML Remote Code Execution Exploit
This Metasploit module creates a malicious docx file that when opened in Word on a vulnerable Windows system will lead to code execution. This vulnerability exists because an attacker can craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering...
Hackers Increasingly Using RTF Template Injection Technique in Phishing Attacks
Three different state-sponsored threat actors aligned with China, India, and Russia have been observed adopting a new method called RTF aka Rich Text Format template injection as part of their phishing campaigns to deliver malware to targeted systems. "RTF template injection is a novel technique...
WIRTE Hacker Group Targets Government, Law, Financial Entities in Middle East
Government, diplomatic entities, military organizations, law firms, and financial institutions primarily located in the Middle East have been targeted as part of a stealthy malware campaign as early as 2019 by making use of malicious Microsoft Excel and Word documents. Russian cybersecurity compa...
Exploit for Path Traversal in Microsoft
CVE-2021-40444 PoC Malicious docx generator to exploit CVE-20...
Security Updates for Microsoft Word Products C2R (November 2021)
The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-42296 %NASLMINLEVEL 70300 C...
The vulnerability of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Word Automation Services, and the Microsoft Word text editor arises from allowing operations beyond the buffer boundaries, enabling attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft Office Online Server, Microsoft Office Web Apps Server, Word Automation Services, and the Microsoft Word text editor is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow...
