Microsoft Office Memory Use After Free Code Execution

The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SimpleXLSX Cross-Site Scripting Vulnerability

SimpleXLSX is a tool by the individual developer Sergey Shuchkin. It is used to parse and retrieve data from Excel XLSx files. A cross-site scripting vulnerability exists in SimpleXLSX version 1.0.12 up to and including version 1.1.12, which stems from the execution of arbitrary JavaScript code...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Dec 2024)

This host is missing a critical security update according to Microsoft Office Click-to-Run update December 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Excel 2016 RCE Vulnerability (KB5002660)

This host is missing an important security update according to Microsoft KB5002660 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2024-49069 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2024-49069 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2024-49069

CVE-2024-49069 is an Excel remote code execution vulnerability in Microsoft Office. The issue targets Excel components and can let an attacker execute arbitrary code by tricking a user into opening a maliciously crafted file. The entry lists a CVSS v3.1 base score of 7.8 (High) with LOCAL attack ...

Description of the security update for Excel 2016: December 10, 2024 (KB5002660)

None None...

Microsoft Excel Remote Code Execution Vulnerability

...

Microsoft Excel resource management error vulnerabilities

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code...

KLA78027 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft SharePoint can ...

CVE-2024-49069: Use After Free

Microsoft Excel Remote Code Execution Vulnerability...

Security Updates for Microsoft Excel Products (December 2024)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-49069 Note that Nessus has no...

CVE-2024-53260

Autolab is a course management service that enables auto-graded programming assignments. A user can modify their first and or last name to include a valid excel / spreadsheet formula. When an instructor downloads their course's roster and opens, this name will then be evaluated as a formula. This...

Microsoft Office Code Execution

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft Excel is related to the lack of measures taken at the administrative level to protect data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicio...

Arbitrary Code Injection

Overview pycel is an A library for compiling excel spreadsheets to python code & visualizing them as a graph Affected versions of this package are vulnerable to Arbitrary Code Injection through the code generation from a crafted formula in an Excel spreadsheet cell. An attacker can execute...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2024-45318)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...