Security Updates for Microsoft Office Products C2R (December 2021)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-43256, CVE-2021-43875 - An...

CVE-2021-42295

Visual Basic for Applications Information Disclosure Vulnerability...

CVE-2021-42295

CVE-2021-42295 is a Visual Basic for Applications information disclosure vulnerability affecting Microsoft Office components. The NVD/NIST entry describes a confidentiality impact (C:H in CVSS 3.1 terms) with local exploitation requirements and user interaction, and a partial confidentiality impa...

CVE-2021-42295 Visual Basic for Applications Information Disclosure Vulnerability

...

CVE-2021-42295 Visual Basic for Applications Information Disclosure Vulnerability

...

KLA12389 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...