8474 matches found
Description of the security update for Excel 2013: February 8, 2022 (KB5002156)
Description of the security update for Excel 2013: February 8, 2022 KB5002156 Summary This security update resolves a Microsoft Excel information disclosure vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-22716. Note: To apply this...
Description of the security update for Excel 2016: February 8, 2022 (KB5002137)
None None...
Description of the security update for Office Online Server: February 8, 2022 (KB5002133)
None None...
Microsoft Excel Information Disclosure Vulnerability
...
Microsoft Disables Internet Macros in Office Apps by Default to Block Malware Attacks
Microsoft on Monday said it's taking steps to disable Visual Basic for Applications VBA macros by default across its products, including Word, Excel, PowerPoint, Access, and Visio, for documents downloaded from the web in an attempt to eliminate an entire class of attack vector. "Bad actors send...
Microsoft Excel 缓冲区错误漏洞
Microsoft Excel is an Office suite of spreadsheet processing software from the U.S. Microsoft Excel has an information disclosure vulnerability, and no details of the vulnerability are available...
Microsoft Office 代码注入漏洞
Microsoft Office is an office software suite product from the United States Microsoft Corporation Microsoft. The product commonly used components include Word, Excel, Access, Powerpoint, FrontPage, etc. Microsoft Office ClickToRun there is a remote code execution vulnerability, there are no detai...
PT-2022-1663 · Microsoft · Office Excel +1
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to an information disclosure vulnerability in Microsoft Excel. This vulnerability is associated with a lack of protection for internal data, which could allow a...
Security Updates for Microsoft Excel Products (February 2022)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-22716 %NASLMINLEVEL 70300 C Tenable, Inc...
The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Researchers Uncover New Iranian Hacking Campaign Targeting Turkish Users
Details have emerged about a previously undocumented malware campaign undertaken by the Iranian MuddyWater advanced persistent threat APT group targeting Turkish private organizations and governmental institutions. "This campaign utilizes malicious PDFs, XLS files and Windows executables to deplo...
Microsoft is now disabling Excel 4.0 macros by default
Back in October 2021, Microsoft announced in an email to customers that it planned to disable Excel 4.0 macros by default to protect customers from malicious documents. Last week—after three decades of macro viruses, and three decades of trying to convince every single Excel user individually to...
Prime Minister’s Office Compromised: Details of Recent Espionage Campaign
Prime Minister’s Office Compromised: Details of Recent Espionage Campaign By Marc Elias · January 25, 2022 A special thanks to Christiaan Beek, Alexandre Mundo, Leandro Velasco and Max Kersten for malware analysis and support during this investigation. Executive Summary Our Advanced Threat Resear...
Microsoft is now disabling Excel 4.0 macros by default
Back in October 2021, Microsoft announced in an email sent to customers that it planned to disable Excel 4.0 macros by default to protect customers from malicious documents. Now, Microsoft says that change has happened. Good news Sometimes good news in the security world comes later than expected...
Emotet Now Using Unconventional IP Address Formats to Evade Detection
Social engineering campaigns involving the deployment of the Emotet malware botnet have been observed using "unconventional" IP address formats for the first time in a bid to sidestep detection by security solutions. This involves the use of hexadecimal and octal representations of the IP address...
Microsoft Excel 2013 RCE Vulnerability (KB5002128)
This host is missing a critical security update according to Microsoft KB5002128 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Excel 2016 RCE Vulnerability (KB5002114)
This host is missing a critical security update according to Microsoft KB5002114 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Office 2016 Remote Code Execution Vulnerability (KB5002116)
This host is missing an important security update according to Microsoft KB5002116 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
