5857 matches found
CVE-2021-38656
CVE-2021-38656 is the Microsoft Word remote code execution vulnerability described across multiple sources. Connected documents provide concrete details: a Word-specific issue, with use-after-free handling of memory (per PT-2021-6308), potentially enabling arbitrary code execution when processing...
CVE-2021-38656 Microsoft Word Remote Code Execution Vulnerability
...
Microsoft Word Code Execution Vulnerability (CNVD-2025-17492)
Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Adobe InCopy Memory Out-of-Bounds Access Vulnerability (CNVD-2021-82416)
Adobe InCopy is a professional word processing program from Adobe, integrated with Adobe InDesign. Adobe InCopy 11.1 and earlier versions have a memory out-of-bounds access vulnerability that could be exploited by attackers to execute arbitrary code...
Microsoft Word Remote Code Execution Vulnerability
...
Vulnerabilities fixed in Microsoft Office products
Microsoft has fixed vulnerabilities in Office products. A malicious party can exploit the vulnerabilities to execute arbitrary code with user privileges and spoofing. Below is a summary of the various vulnerabilities described by component and the impact. Microsoft Office SharePoint:...
KLA12288 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Office Graphics can be exploited remotely ...
Microsoft Office Word 资源管理错误漏洞
Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Exploit for Path Traversal in Microsoft
This repository is a proof-of-concept PoC exploit for CVE-2021-40444, a Microsoft Office Word remote code execution vulnerability. The PoC is a malicious docx generator that creates a document that, when opened, will execute arbitrary code on the victim's system. The PoC consists of several files...
Exploit for Path Traversal in Microsoft
CVE-2021-40444 docx Generate .docx generate...
Exploit for Path Traversal in Microsoft
CVE-2021-40444 PoC Malicious docx generator to exploit CVE-20...
FIN7 Capitalizes on Windows 11 Release in Latest Gambit
The FIN7 financial cybercrime gang is back, delivering JavaScript backdoors using Word documents themed around the next version of Windows. That’s according to researchers at Anomali, who observed a recent campaign from the group that leveraged six different docs, all referencing “Windows 11 Alph...
Cross-site Scripting (XSS) - Stored in zikula/core
✍️ Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites 🕵️♂️ Proof of Concept // PoC.js 1- Go to -- https://demo.ziku.la/blocks/admin/block/edit/2 2- Go to Editor and link a test word with a link As...
Microsoft Word glTF-SDK Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the glTF-SDK...
[SECURITY] Fedora 33 Update: python-docx-0.8.11-3.fc33
A Python library for creating and updating Microsoft Word .docx files...
[SECURITY] Fedora 34 Update: python-docx-0.8.11-3.fc34
A Python library for creating and updating Microsoft Word .docx files...
Fedora: Security Advisory for python-docx (FEDORA-2021-aa6ebc01be)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: rust-textwrap-0.14.2-3.fc34
Powerful library for word wrapping, indenting, and dedenting strings...
Fedora: Security Advisory for rust-textwrap (FEDORA-2021-3cf88e44b4)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Microsoft Word Code Execution Vulnerability (CNVD-2025-17493)
Microsoft Word is a word processing software in the Office suite of the American Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...