8474 matches found
CVE-2021-43256
CVE-2021-43256 is an Microsoft Excel remote code execution vulnerability. Connected documents confirm the flaw affects Microsoft Excel as part of Office product updates and reference CVE-2021-43256 in December 2021 security updates. The vulnerability is described as enabling remote code execution...
Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB5002105)
This host is missing an important security update according to Microsoft KB5002105 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Excel 2016 Multiple Vulnerabilities (KB5002098)
This host is missing an important security update according to Microsoft KB5002098 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
poi: a specially crafted Microsoft Excel document allows attacker to read files from the local filesystem
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity XXE Processing...
Description of the security update for Excel 2013: December 14, 2021 (KB5002105)
Description of the security update for Excel 2013: December 14, 2021 KB5002105 Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-43256. Note: To apply this...
Description of the security update for Office Web Apps Server 2013: December 14, 2021 (KB5002103)
None None...
Description of the security update for SharePoint Server 2019: December 14, 2021 (KB5002054)
None None...
Description of the security update for Excel 2016: December 14, 2021 (KB5002098)
None None...
Description of the security update for Office Online Server: December 14, 2021 (KB5002097)
None None...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Office和Microsoft Excel 代码注入漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA.Microsoft Excel is vulnerable to remote code execution. An attacker could exploit this vulnerability to execute code on the target host...
KLA12389 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...
PT-2021-6389
Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description The issue is related to incorrect code generation management in Microsoft Office, Microsoft Excel, and Microsoft 365 packages. This allows a remote attacker to execute arbitrary code...
Microsoft Office 代码注入漏洞
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. An attacker can exploit this...
Security Updates for Microsoft Excel Products (December 2021)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-43256 %NASLMINLEVEL 70300 C...
The vulnerability of Microsoft Office packages, Microsoft 365 Apps, Microsoft Excel, and Microsoft SharePoint relates to improper code generation management, allowing an attacker to execute arbitrary code.
The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps, Microsoft Excel, and Microsoft SharePoint are related to improper code generation. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...
Fedora: Security Advisory for libxls (FEDORA-2021-785cdbddf9)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for libxls (FEDORA-2021-25e89d9374)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Stealthy ‘WIRTE’ Gang Targets Middle Eastern Governments
A threat actor tracked as WIRTE has been assaulting Middle East governments since at least 2019 using “living-off-the-land” techniques and malicious Excel 4.0 macros. On Monday, Kaspersky reported that it observed the group in February using Microsoft Excel droppers, which planted hidden...
WIRTE Hacker Group Targets Government, Law, Financial Entities in Middle East
Government, diplomatic entities, military organizations, law firms, and financial institutions primarily located in the Middle East have been targeted as part of a stealthy malware campaign as early as 2019 by making use of malicious Microsoft Excel and Word documents. Russian cybersecurity compa...