4403 matches found
CVE-2022-33631 Microsoft Excel Security Feature Bypass Vulnerability
...
CVE-2022-33631
Technical details about CVE-2022-33631 are not publicly available in the provided documents. Monitor for updates from official sources for affected products, vulnerable components, and fixes.
Description of the security update for Excel 2016: August 9, 2022 (KB5002232)
None None...
Description of the security update for Office Online Server: August 9, 2022 (KB5002228)
None None...
Security Updates for Microsoft Excel Products (August 2022)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...
PT-2022-4158 · Microsoft · Office Excel +1
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Office Online Server affected versions not specified Description: The issue is related to insufficient input validation in Office Online Server, which can be exploited to execute arbitrary code ...
PT-2022-4109 · Microsoft · Office Excel
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Excel, which can be exploited to circumvent existing security restrictions. This allows an attacker to affect the...
Microsoft Excel 安全漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Office Excel. The vulnerability arises from a failure of a network system or product to properly filter specific elements of externally entered data duri...
Microsoft Excel 安全漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel, which can be exploited by attackers to perform certain illegal operations...
KLA12606 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Office ca...
CVE-2022-1539
The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks...
CVE-2022-1539 Exports and Reports < 0.9.2 - Contributor+ CSV Injection
The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to export, which could lead to a CSV injection, by the use of Microsoft Excel DDE function, or to leak data via maliciously injected hyperlinks...
The vulnerability of Microsoft Excel editors, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel spreadsheet editors is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Formula Injection in Exported Data
Impact Datasets exported to file e.g. CSV / XLS are not sufficiently sanitized, to neutralize potential formula injection Patches - The issue is addressed in the upcoming 0.8.0 release - This fix will also be back-ported to the 0.7.x branch, applied to the 0.7.2 release Workarounds Users exportin...
The vulnerability of Microsoft Excel and Microsoft Office Web Apps Server packages lies in the lack of proper validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Excel and Microsoft Office Web Apps Server packages is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2022-30173
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-30173
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2022-30173
Microsoft Excel Remote Code Execution Vulnerability...
