CVE-2018-8323

Affected software: Microsoft SharePoint Server (notably SharePoint Enterprise Server variants cited in CNVD entries). Vulnerability: Elevation of privilege caused by improper sanitization of specially crafted web requests to the affected SharePoint server. Root cause / impact: The issue allows an...

KLA11287 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A tampering vulnerability in Microsoft Office...

Security Updates for Microsoft Sharepoint Server (July 2018)

The Microsoft Sharepoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package...