CVE-2023-38246 Adobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) stack-based stale pointer vulnerability

Adobe Acrobat Reader versions 23.003.20244 and earlier and 20.005.30467 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2023-38246 Adobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) stack-based stale pointer vulnerability

Adobe Acrobat Reader versions 23.003.20244 and earlier and 20.005.30467 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a...

CVE-2023-38245 Adobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Hash Theft Vulnerability

Adobe Acrobat Reader versions 23.003.20244 and earlier and 20.005.30467 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a...

CVE-2023-38245 Adobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Hash Theft Vulnerability

Adobe Acrobat Reader versions 23.003.20244 and earlier and 20.005.30467 and earlier are affected by an Information Disclosure vulnerability. An unauthenticated attacker could leverage this vulnerability to obtain NTLMv2 credentials. Exploitation of this issue requires user interaction in that a...

The vulnerability of the ActiveX components of Microsoft Office programs allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of the ActiveX components of Microsoft Office programs is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using the created file...

Microsoft Office 2016 ActiveX Remote Code Execution Vulnerability (KB5002058)

This host is missing an important security update according to Microsoft KB5002058 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerability (KB5002069)

This host is missing an important security update according to Microsoft KB5002069 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-33152

Microsoft ActiveX Remote Code Execution Vulnerability...

CVE-2023-33152

Microsoft ActiveX Remote Code Execution Vulnerability...

Remote code execution

Microsoft ActiveX Remote Code Execution Vulnerability...

CVE-2023-33152 Microsoft ActiveX Remote Code Execution Vulnerability

...

CVE-2023-33152 Microsoft ActiveX Remote Code Execution Vulnerability

...

CVE-2023-33152

CVE-2023-33152 is a Microsoft Office ActiveX remote code execution vulnerability. Documents indicate an RCE via Office ActiveX controls, with affected Office versions including Office 2013 and Office 2016. Mitigations are security updates KB5002069 (Office 2013) and KB5002058 (Office 2016). The C...

Description of the security update for Office 2016: July 11, 2023 (KB5002058)

None None...

Description of the security update for Office 2013: July 11, 2023 (KB5002069)

Description of the security update for Office 2013: July 11, 2023 KB5002069 Summary This security update resolves a Microsoft ActiveX remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-33152. Note: To apply this...

Microsoft ActiveX Remote Code Execution Vulnerability

...

CVE-2023-28829

A vulnerability has been identified in SIMATIC NET PC Software V14 All versions, SIMATIC NET PC Software V15 All versions, SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC WinCC All versions V8.0, SINAUT Software ST7sc All versions. Before...

CVE-2023-28829

A vulnerability has been identified in SIMATIC NET PC Software V14 All versions, SIMATIC NET PC Software V15 All versions, SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC WinCC All versions V8.0, SINAUT Software ST7sc All versions. Before...

CVE-2023-28829

A vulnerability has been identified in SIMATIC NET PC Software V14 All versions, SIMATIC NET PC Software V15 All versions, SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions, SIMATIC PCS 7 V9.1 All versions, SIMATIC WinCC All versions V8.0, SINAUT Software ST7sc All versions. Before...

PT-2023-3622 · Microsoft +1 · Windows +6

Name of the Vulnerable Software and Affected Versions: SIMATIC NET PC Software versions V14 through V15 SIMATIC PCS 7 versions V8.2 through V9.1 SIMATIC WinCC versions prior to V8.0 SINAUT Software ST7sc affected versions not specified Description: The issue is related to the use of outdated...