CVE-2018-8160

CVE-2018-8160 is an information-disclosure vulnerability in Microsoft Outlook (Office suite). The vulnerability is triggered when a user opens a malicious message, which could lead to disclosure of sensitive information. The attacker’s capability path involves sending a crafted email that lures t...

Security Updates for Microsoft Office Web Apps (May 2018)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker...

Security Updates for Microsoft Office Products (May 2018)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

KLA11243 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, bypass security restrictions and gain privileges. Below is a complete list of vulnerabilities: 1. An incorrect handling ...