25 matches found
ShimMe
ShimMe Herramientas de la charla DEFCON 32 "SHIM me what you got - Manipulando Shim y Office para inyección de código" Office Injector - Invoca un método RPC en el servicio OfficeClickToRun que inyecta una DLL en un proceso suspendido que se ejecuta como NT AUTHORITY\SYSTEM lanzado por el servici...
EUVD-2026-29635
Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...
CVE-2026-40418
Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally...
Microsoft Office ClickToRun 资源管理错误漏洞
Microsoft Office ClickToRun is a component developed by Microsoft Corporation that allows for the download and installation of Microsoft Office products. There is a resource management vulnerability in Microsoft Office ClickToRun. Attackers can exploit this vulnerability to gain higher privileges...
Microsoft Office ClickToRun 访问控制错误漏洞
Microsoft Office ClickToRun is a component developed by Microsoft that allows for the download and installation of Microsoft Office products. There is an access control error vulnerability present in Microsoft Office ClickToRun. Attackers can exploit this vulnerability to gain higher privileges...
EUVD-2021-13829
Malware in sbrugna...
Microsoft Office ClickToRun Remote Code Execution Vulnerability
Microsoft Office is an office software suite product from the United States Microsoft Corporation Microsoft. The product commonly used components include Word, Excel, Access, Powerpoint, FrontPage, etc. Microsoft Office ClickToRun there is a remote code execution vulnerability, there are no detai...
CVE-2022-22004
Microsoft Office ClickToRun Remote Code Execution Vulnerability...
CVE-2022-22004
Microsoft Office ClickToRun Remote Code Execution Vulnerability...
Remote code execution
Microsoft Office ClickToRun Remote Code Execution Vulnerability...
CVE-2022-22004
CVE-2022-22004 is a Microsoft Office ClickToRun remote code execution vulnerability. Affected software: Microsoft Office ClickToRun components within Office products. Root cause and impact are described across connected sources: exploitation leads to remote code execution with a high impact profi...
CVE-2022-22004 Microsoft Office ClickToRun Remote Code Execution Vulnerability
...
Microsoft Office ClickToRun Remote Code Execution Vulnerability
...
Microsoft Office 代码注入漏洞
Microsoft Office is an office software suite product from the United States Microsoft Corporation Microsoft. The product commonly used components include Word, Excel, Access, Powerpoint, FrontPage, etc. Microsoft Office ClickToRun there is a remote code execution vulnerability, there are no detai...
KLA12454 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An...
CVE-2021-27058
Microsoft Office ClickToRun Remote Code Execution Vulnerability...
Remote code execution
Microsoft Office ClickToRun Remote Code Execution Vulnerability...
CVE-2021-27058
CVE-2021-27058 affects the Microsoft Office ClickToRun component. The provided documents identify a remote code execution vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), attack vector LOCAL, requires user interaction, and an impact on confidentiality, integrity, and availability. The exa...