10122 matches found
Microsoft Excel 2016 RCE Vulnerability (KB5002643)
This host is missing an important security update according to Microsoft KB5002643 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Office components. A malicious person could exploit the vulnerabilities to execute arbitrary code with the victim's privileges, potentially gaining access to sensitive data in the victim's context. Successful exploitation requires the malicious party to tric...
CVE-2024-43504
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2024-43504
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2024-43504 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2024-43504 Microsoft Excel Remote Code Execution Vulnerability
...
CVE-2024-43504
CVE-2024-43504 – Microsoft Excel RCE : Public sources confirm a remote code execution vulnerability in Microsoft Excel (Office suite). The vulnerability affects Excel components (including Excel 2016 via KB5002643 and newer Office updates) and can be triggered by user interaction when a crafted f...
Description of the security update for Excel 2016: October 8, 2024 (KB5002643)
None None...
Microsoft Excel Remote Code Execution Vulnerability
...
PT-2024-6768 · Microsoft · 365 Apps For Enterprise +3
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specified...
Microsoft Excel resource management error vulnerabilities
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to execute arbitrary code on the system...
KLA73908 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Office c...
CVE-2024-43504: Use After Free
Microsoft Excel Remote Code Execution Vulnerability...
Security Updates for Microsoft Excel Products (October 2024)
The Microsoft Excel Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead...
XML External Entity (XXE) Injection
Overview phpoffice/phpspreadsheet is a Spreadsheet engine that Read, Create and Write Spreadsheet documents in PHP . Affected versions of this package are vulnerable to XML External Entity XXE Injection through the toUtf8 function in the XmlScanner.php file. An attacker can disclose server files...
XXE in PHPSpreadsheet's XLSX reader
Summary The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white-spaces. On servers that allow users to upload their own Excel XLSX sheets, Server files and sensitive information can be disclosed by...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection through the toUtf8 function in the XmlScanner.php file. An attacker can disclose server files and sensitive information by providing an Excel sheet with a modified XML structure, specifying UTF-7 encodi...
GHSA-6HWR-6V2F-3M88 XXE in PHPSpreadsheet's XLSX reader
Summary The security scanner responsible for preventing XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white-spaces. On servers that allow users to upload their own Excel XLSX sheets, Server files and sensitive information can be disclosed by...
Absolute Path Traversal
Overview Affected versions of this package are vulnerable to Absolute Path Traversal via the setPath method. An attacker can access or leak sensitive information by constructing a malicious XLSX file that manipulates the path to external or internal resources, exploiting the file reading mechanis...
Microsoft Excel Memory Use After Free Privilege Escalation
The vulnerability of Microsoft Excel editors is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...