442 matches found
KLA78027 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft SharePoint can ...
Microsoft Office 资源管理错误漏洞
Microsoft Access is a relational database management system in the Office suite of the U.S. Microsoft Microsoft Corporation. A code execution vulnerability exists in Microsoft Access, which can be exploited by an attacker to execute arbitrary code on the system...
Security Updates for Microsoft Access Products (December 2024)
The Microsoft Access Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-49142 Note that Nessus has n...
Hackers Can Exploit 'Forced Authentication' to Steal Windows NTLM Tokens
Cybersecurity researchers have discovered a case of "forced authentication" that could be exploited to leak a Windows user's NT LAN Manager NTLM tokens by tricking a victim into opening a specially crafted Microsoft Access file. The attack takes advantage of a legitimate feature in the database...
Office and Windows HTML Remote Code Execution Vulnerability (CVE-2023-36884) Mitigation
The remote system may be vulnerable to CVE-2023-36884 since it does not have the correct FEATUREBLOCKCROSSPROTOCOLFILENAVIGATION registry key mitigations applied as referenced in the vendor advisory. An unauthenticated, remote attacker could exploit this, by using specially-crafted Microsoft Offi...
CVE-2023-29333
Microsoft Access Denial of Service Vulnerability...
CVE-2023-29333
Microsoft Access Denial of Service Vulnerability...
CVE-2023-29333 Microsoft Access Denial of Service Vulnerability
...
PT-2023-2717 · Microsoft · 365 Apps For Enterprise +2
Name of the Vulnerable Software and Affected Versions: Microsoft Access affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Office and Microsoft 365 Apps for Enterprise packages, which can lead to a denial of service. This can be exploit...
Microsoft Access Database Detected
A Microsoft Access Database file has been detected on the target host. This may expose privileged information or configurations to a malicious actor. No source data...
mdbtools: Multiple Vulnerabilities
Background mdbtools is a set of libraries and utilities for reading Microsoft Access database MDB files. Description Multiple vulnerabilities have been discovered in mdbtools. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...
March 1, 2022, update for Office 2016 (KB5002160)
None None...
Description of the security update for Office 2013: January 11, 2022 (KB5002124)
Description of the security update for Office 2013: January 11, 2022 KB5002124 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-21840. Note: To apply thi...
Microsoft Access ACCDB File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Access. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
CVE-2021-41368
Microsoft Access Remote Code Execution Vulnerability...
CVE-2021-41368
Microsoft Access Remote Code Execution Vulnerability...
Remote code execution
Microsoft Access Remote Code Execution Vulnerability...
CVE-2021-41368
Microsoft Access Remote Code Execution Vulnerability...
