CVE-2024-38170

CVE-2024-38170 is a Microsoft Excel remote code execution vulnerability (RCE). The provided documents confirm affected software as Microsoft Excel and link to August 2024 Office updates as the remediation. CVSS 3.1 base score 7.1 (HIGH) with LOCAL attack vector, LOW attack complexity, no privileg...

CVE-2024-38172 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2024-38172 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2024-38172

CVE-2024-38172 is a Microsoft Excel remote code execution vulnerability. Multiple connected sources confirm affected product scope includes Excel in Microsoft Office (including Mac), with the underlying issue leading to code execution. The CVSS 3.1 vector in the initial data shows Local attack ve...

PT-2024-6678 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code. This can potentially allow an attacker to run malicious code. Recommendations:...

CVE-2024-38170: Heap-based Buffer Overflow

Microsoft Excel Remote Code Execution Vulnerability...

KLA71479 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft PowerPoint can be exploit...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code. The following products and versions are affected:Microsoft 365 Apps for...

CVE-2024-38172: Heap-based Buffer Overflow

Microsoft Excel Remote Code Execution Vulnerability...

Microsoft Excel FBX File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2024-38734

Unrestricted Upload of File with Dangerous Type vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft Excel allows Code Injection.This issue affects Import Spreadsheets from Microsoft Excel: from n/a through 10.1.4...

CVE-2024-38734

CVE-2024-38734 affects the WordPress plugin Import Spreadsheets from Microsoft Excel (

CVE-2024-38734 WordPress Import Spreadsheets from Microsoft Excel plugin <= 10.1.4 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft Excel allows Code Injection.This issue affects Import Spreadsheets from Microsoft Excel: from n/a through 10.1.4...

CVE-2024-38734 WordPress Import Spreadsheets from Microsoft Excel plugin <= 10.1.4 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft Excel allows Code Injection.This issue affects Import Spreadsheets from Microsoft Excel: from n/a through 10.1.4...

WordPress plugin Import Spreadsheets from Microsoft Excel Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

CVE-2024-38734: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in SpreadsheetConverter Import Spreadsheets from Microsoft Excel allows Code Injection.This issue affects Import Spreadsheets from Microsoft Excel: from n/a through 10.1.4...

PT-2024-28178 · Microsoft · Import Spreadsheets From Microsoft Excel

Name of the Vulnerable Software and Affected Versions: Import Spreadsheets from Microsoft Excel versions 10.1.4 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, potentially enabling code injection. This is related to the Import Spreadsheets from...

WordPress Import Spreadsheets from Microsoft Excel Plugin <= 10.1.4 is vulnerable to Arbitrary File Upload

Software Import Spreadsheets from Microsoft Excel Type Plugin Vulnerable versions = 10.1.4 Fixed in 10.1.5 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-38734 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID 2c69040b9cb5 Credits Peng Zho...

GHSA-MQJC-X563-C9Q8 silverstripe/framework CSV Excel Macro Injection

In the CSV export feature of the CMS it's possible for the output to contain macros and scripts, which if imported without sanitisation into software including Microsoft Excel may be executed. In order to safeguard against this threat all potentially executable cell values exported from CSV will ...

silverstripe/framework CSV Excel Macro Injection

In the CSV export feature of the CMS it's possible for the output to contain macros and scripts, which if imported without sanitisation into software including Microsoft Excel may be executed. In order to safeguard against this threat all potentially executable cell values exported from CSV will ...