CVE-2018-8311

CVE-2018-8311 is a remote code execution vulnerability in Skype for Business and Lync caused by improper sanitization of crafted content. The issue could allow code execution in the context of the logged-in user, via remote, user-initiated action (e.g., viewing crafted content or links). Affected...

KLA11287 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A tampering vulnerability in Microsoft Office...