The vulnerability of the Microsoft Office software package, which allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...

Microsoft Excel Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Excel improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to explo...

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

PT-2016-7280

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2010 SP2 Microsoft Word versions 2007 SP3 through 2010 SP2 Microsoft Office Compatibility Pack version SP3 Microsoft Word Viewer affected versions not specified Microsoft Word for Mac version 2011...

PT-2016-7291

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2010 SP2 Microsoft Office Compatibility Pack version SP3 Microsoft Office Web Apps version 2010 SP2 Microsoft SharePoint Server version 2010 SP2 Microsoft Word version 2007 SP3 through 2010 SP2...

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Word text editor, and the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Word text editor, and the Microsoft Office suite arises from an operation that occurs outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using a specially...

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer, and the Microsoft Excel spreadsheet editor allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer for electronic spreadsheet viewing, and the Microsoft Excel spreadsheet editor is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious...

The vulnerability of Microsoft Excel editors, along with the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as the Microsoft Office Compatibility Pack, is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted documen...

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft SharePoint Server corporate application suite allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft SharePoint Server corporate application suite arises from an operation that goes beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafte...

chromium-browser: use after free in pdfium

A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

chromium-browser: local file access in pdfium

PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file...

Adobe ColdFusion OOXML XXE Information Disclosure (CVE-2016-4264)

An XML external entity XXE processing vulnerability has been reported in the Office Open XML OOXML parsing component of Adobe ColdFusion. The vulnerability is due to a lack of validation on user-supplied input when parsing OOXML documents. A remote attacker could exploit this vulnerability by...

CVE-2016-9318

libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity XXE attacks via a crafte...

CVE-2016-9318

libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity XXE attacks via a crafte...

UBUNTU-CVE-2016-9318

libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity XXE attacks via a crafte...

CVE-2016-7245

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, and Office 2016 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-7244

Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service application hang via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."...

CVE-2016-7232

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-7230

Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-7228

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability....