Security Updates for Microsoft Office Products C2R (December 2020)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...

CVE-2020-17122

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2020-17122

CVE-2020-17122 is a Microsoft Excel remote code execution vulnerability. The public details in the supplied documents identify Excel (Office component) as affected, with the vulnerability categorized as a remote code execution issue in multiple Office deployments. The NVD entry notes a CVSSv3.1 b...

Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (December 2020)

The Microsoft Office Online Server or Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute...

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed several vulnerabilities in Microsoft Office and Microsoft SharePoint. The vulnerabilities allow a malicious potentially able to launch attacks that result in the following categories of damage: Bypassing security measure; Executing arbitrary code under user privileges; Spoofin...