Lucene search
+L

120 matches found

ThreatPost
ThreatPost
added 2018/02/15 12:31 p.m.99 views

Word-based Malware Attack Doesn’t Use Macros

Typically, inbox-based attacks that include malicious Microsoft Office attachments require adversaries to trick users into enabling macros. But researchers say they have identified a new malicious email campaign that uses booby-trapped Office attachments that are macro-free. The attacks do not...

9.3CVSS0.99945EPSS
SaveExploits33References4
CNVD
CNVD
added 2018/01/23 12:00 a.m.11 views

Microsoft Office Memory Corruption Vulnerability (CNVD-2018-02190)

Microsoft Office 2003 and so on are the United States Microsoft Microsoft company developed an office software suite of products.Equation Editor is one of the formula editor. A memory corruption vulnerability exists in Equation Editor in Microsoft Office, which arises from the program failing to...

9.3CVSS7.1AI score0.19727EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/23 12:00 a.m.8 views

Microsoft Office Memory Corruption Vulnerability (CNVD-2018-02186)

Microsoft Office 2003 and so on are the United States Microsoft Microsoft company developed an office software suite of products.Equation Editor is one of the formula editor. A memory corruption vulnerability exists in Equation Editor in Microsoft Office, which arises from the program failing to...

9.3CVSS7.1AI score0.20489EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/23 12:00 a.m.13 views

Microsoft Office Memory Corruption Vulnerability (CNVD-2018-02183)

Microsoft Office 2003 and so on are the United States Microsoft Microsoft company developed an office software suite of products.Equation Editor is one of the formula editor. A memory corruption vulnerability exists in Equation Editor in Microsoft Office, which arises from the program failing to...

9.3CVSS7.1AI score0.18641EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/23 12:00 a.m.11 views

Microsoft Office Memory Corruption Vulnerability (CNVD-2018-02184)

Microsoft Office 2003 and so on are the United States Microsoft Microsoft company developed an office software suite of products.Equation Editor is one of the formula editor. A memory corruption vulnerability exists in Equation Editor in Microsoft Office, which arises from the program failing to...

9.3CVSS7.1AI score0.18641EPSS
SaveExploits0References1
OSV
OSV
added 2018/01/22 11:29 p.m.6 views

CVE-2018-0862

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

8.8CVSS6.4AI score0.18641EPSS
SaveExploits0References2
Prion
Prion
added 2018/01/22 11:29 p.m.28 views

Remote code execution

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

9.3CVSS8.4AI score0.24582EPSS
SaveExploits0References2Affected Software3
Prion
Prion
added 2018/01/22 11:29 p.m.24 views

Remote code execution

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

9.3CVSS8.4AI score0.24582EPSS
SaveExploits0References2Affected Software3
NVD
NVD
added 2018/01/22 11:29 p.m.24 views

CVE-2018-0848

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

9.3CVSS8.4AI score0.20489EPSS
SaveExploits0References2
NVD
NVD
added 2018/01/22 11:29 p.m.23 views

CVE-2018-0862

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

9.3CVSS8.4AI score0.18641EPSS
SaveExploits0References2
Prion
Prion
added 2018/01/22 11:29 p.m.31 views

Remote code execution

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

9.3CVSS8.4AI score0.24582EPSS
SaveExploits0References2Affected Software3
OSV
OSV
added 2018/01/22 11:29 p.m.7 views

CVE-2018-0845

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

7.8CVSS6.4AI score0.19727EPSS
SaveExploits0References2
NVD
NVD
added 2018/01/22 11:29 p.m.22 views

CVE-2018-0845

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

9.3CVSS8.4AI score0.19727EPSS
SaveExploits0References2
NVD
NVD
added 2018/01/22 11:29 p.m.27 views

CVE-2018-0849

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

9.3CVSS8.4AI score0.18641EPSS
SaveExploits0References2
Prion
Prion
added 2018/01/22 11:29 p.m.33 views

Remote code execution

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

9.3CVSS8.4AI score0.24582EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2018/01/22 11:00 p.m.48 views

CVE-2018-0862

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

8.4AI score0.18641EPSS
SaveExploits0References2
CVE
CVE
added 2018/01/22 11:00 p.m.99 views

CVE-2018-0845

The CVE-2018-0845 issue concerns Equation Editor in Microsoft Office 2003–2016, where a memory handling flaw in Equation Editor can be exploited to achieve remote code execution. The root cause is improper handling of objects in memory, enabling an attacker to run code in the context of the user ...

9.3CVSS8.3AI score0.19727EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2018/01/22 11:00 p.m.41 views

CVE-2018-0849

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is...

8.4AI score0.18641EPSS
SaveExploits0References2
CVE
CVE
added 2018/01/22 11:00 p.m.95 views

CVE-2018-0849

CVE-2018-0849 describes a remote code execution vulnerability in Equation Editor across Microsoft Office versions (2003–2016). The root cause is memory handling of objects in Equation Editor, enabling an attacker who can entice a user to open a crafted file to execute code under the current user’...

9.3CVSS8.3AI score0.18641EPSS
SaveExploits0References2Affected Software3
CVE
CVE
added 2018/01/22 11:00 p.m.96 views

CVE-2018-0862

Summary: CVE-2018-0862 (and related CNVD/NVD entries) describes a memory handling vulnerability in Equation Editor across Microsoft Office 2003, 2007, 2010, 2013, and 2016 that enables remote code execution. The root cause is improper handling of objects in memory within Equation Editor. Impact s...

9.3CVSS8.3AI score0.18641EPSS
SaveExploits0References2Affected Software3
Rows per page
Query Builder