PT-2023-3905 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Excel. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the moment,...

Security Updates for Microsoft Excel Products (July 2023)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2023-33162: Out-of-bounds Read

Microsoft Excel Information Disclosure Vulnerability...

CVE-2023-33161: Double Free

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2023-33158: Integer Underflow (Wrap or Wraparound)

Microsoft Excel Remote Code Execution Vulnerability...

Microsoft Excel security vulnerabilities

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Office Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Excel security vulnerabilities

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

PT-2023-3831 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in Microsoft Excel, allowing an attacker to gain unauthorized access to the device. This can enable...

PT-2023-3934 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Excel. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the moment,...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 32-bit - Remote Code Execution (RCE)

Title:Microsoft 365 MSO Version 2305 Build 16.0.16501.20074 32-bit - Remote Code Execution RCE Author: nu11secur1ty Date: 06.27.2023 Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/excel Reference: https://portswigger.net/daily-swig/rce CVE-2023-33137...

CVE-2023-36347

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data...

CVE-2023-36347

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data...

Command Injection

admidio/admidio is vulnerable to CSV Injection. The vulnerability exists due to improper neutralization of formula elements in a CSV file which allows an attacker to execute arbitrary code via a crafted excel file...

Microsoft Excel / 365 MSO Remote Code Execution

Title: Microsoft Excel Microsoft® Microsoft 365 MSO Version 2305 Build 16.0.16501.20074 32-bit Remote Code Execution Vulnerability Author: nu11secur1ty Date: 06.27.2023 Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/excel Reference:...

Excel Data Forensics

In this detailed article about academic plagiarism are some interesting details about how to do data forensics on Excel files. It really needs the graphics to understand, so see the description at the link. And, yes, an author of a paper on dishonesty is being accused of dishonesty. Theres more...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when it contained a free of uninitialized pointer in the xlsxioreadsheetlistclose function. Exploiting this vulnerability is possible via a crafted XLSX file. Details Denial of Service DoS describes a family of...

Veeam ONE Database Calculator for Veeam Backup for Microsoft 365 Monitoring

New Interactive Calculator An updated interactive calculator is now available to replace the legacy Excel file included with this article. Veeam ONE Calculator Solution Summary This Veeam ONE database sizing calculator will help estimate the database size required to retain historical data when...

Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...