496 matches found
The vulnerability of the Microsoft Access database management system, Microsoft Office applications, and 365 Enterprise Apps relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Access database management systems, Microsoft Office applications, and 365 Enterprise Apps is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...
Microsoft Access Code Execution Vulnerability (CNVD-2025-13273)
Microsoft Access is a relational database management system in the Office suite of the U.S. Microsoft Microsoft Corporation. A code execution vulnerability exists in Microsoft Access, which can be exploited by an attacker to execute arbitrary code on the system...
CVE-2024-49142
Microsoft Access Remote Code Execution Vulnerability...
CVE-2024-49142
Microsoft Access Remote Code Execution Vulnerability...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Dec 2024)
This host is missing a critical security update according to Microsoft Office Click-to-Run update December 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Microsoft Access 2016 RCE Vulnerability (KB5002641)
This host is missing an important security update according to Microsoft KB5002641. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
CVE-2024-49142
CVE-2024-49142 is a Microsoft Access remote code execution vulnerability. Connected sources confirm a vulnerability in Microsoft Access that allows arbitrary code execution when a malicious file is opened or run, and Microsoft released a security update to address it (KB5002641 for Access 2016). ...
CVE-2024-49142 Microsoft Access Remote Code Execution Vulnerability
...
CVE-2024-49142 Microsoft Access Remote Code Execution Vulnerability
...
Microsoft Access Remote Code Execution Vulnerability
...
Description of the security update for Access 2016: December 10, 2024 (KB5002641)
None None...
PT-2024-9424 · Microsoft · Access +1
Name of the Vulnerable Software and Affected Versions: Microsoft Access affected versions not specified Description: The issue is related to a memory use after free vulnerability in Microsoft Access, which can be exploited by an attacker to execute arbitrary code using a specially crafted malicio...
KLA78027 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft SharePoint can ...
Security Updates for Microsoft Access Products (December 2024)
The Microsoft Access Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-49142 Note that Nessus has n...
CVE-2024-49142: Use After Free
Microsoft Access Remote Code Execution Vulnerability...
Microsoft Office 资源管理错误漏洞
Microsoft Access is a relational database management system in the Office suite of the U.S. Microsoft Microsoft Corporation. A code execution vulnerability exists in Microsoft Access, which can be exploited by an attacker to execute arbitrary code on the system...
Hackers Can Exploit 'Forced Authentication' to Steal Windows NTLM Tokens
Cybersecurity researchers have discovered a case of "forced authentication" that could be exploited to leak a Windows user's NT LAN Manager NTLM tokens by tricking a victim into opening a specially crafted Microsoft Access file. The attack takes advantage of a legitimate feature in the database...
Office and Windows HTML Remote Code Execution Vulnerability (CVE-2023-36884) Mitigation
The remote system may be vulnerable to CVE-2023-36884 since it does not have the correct FEATUREBLOCKCROSSPROTOCOLFILENAVIGATION registry key mitigations applied as referenced in the vendor advisory. An unauthenticated, remote attacker could exploit this, by using specially-crafted Microsoft Offi...