Lucene search
+L

4403 matches found

CNNVD
CNNVD
added 2022/04/12 12:00 a.m.11 views

Microsoft Excel 代码注入漏洞

Microsoft Office is a suite of office software products from Microsoft Corporation USA. Microsoft Office Excel is vulnerable to remote code execution. The vulnerability stems from the process of constructing code segments from external input data, where the network system or product fails to...

7.8CVSS8.4AI score0.02046EPSS
SaveExploits0References6
Kaspersky
Kaspersky
added 2022/04/12 12:00 a.m.45 views

KLA12511 Remote code execution vulnerability in Windows Apps

Remote code execution vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2022-26903 Related products Microsoft-Excel Microsoft-Word CVE list CVE-2022-26903 critical KB list Solution Install necessary updates...

9.3CVSS8.3AI score0.02577EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.8 views

PT-2022-2664

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description The issue is related to incorrect code generation management in Microsoft Excel. It allows a remote attacker to execute arbitrary code. Recommendations At the moment, there is no...

9.3CVSS7.5AI score0.02046EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2022/04/12 12:00 a.m.55 views

Security Updates for Microsoft Excel Products (April 2022)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-24473, CVE-2022-26901...

7.8CVSS8.5AI score0.02583EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/03/28 12:00 a.m.27 views

Microsoft Office 2010 Remote Code Execution Vulnerability (KB4486698)

Microsoft Office 2010 is prone to a remote code execution RCE vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

9.3CVSS7.9AI score0.03244EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:00 a.m.13 views

The vulnerability of Microsoft Excel’s spreadsheet editor, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code on the target system.

The vulnerability of Microsoft Excel spreadsheet editors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially created file...

7.8CVSS8.2AI score0.02591EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2022/03/03 5:18 p.m.230 views

Phishing Campaign Targeted Those Aiding Ukraine Refugees

Cyberattackers used a compromised Ukrainian military email address to phish EU government employees who’ve been involved in managing the logistics of refugees fleeing Ukraine, according to a new report. Ukraine has been at the center of an unprecedented wave of cyberattacks in recent weeks and...

8.5AI score
SaveExploits0References8
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:00 a.m.72 views

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory...

9.3CVSS2.8AI score0.21805EPSS
SaveIn wildExploits0
VulnCheck KEV
VulnCheck KEV
added 2022/03/03 12:00 a.m.6 views

VulnCheck KEV: CVE-2019-1297

A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory...

9.3CVSS7.7AI score0.21805EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:00 a.m.103 views

Microsoft Excel Featheader Record Memory Corruption Vulnerability

Microsoft Office Excel allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset...

9.3CVSS8AI score0.85731EPSS
SaveIn wildExploits11
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.13 views

The vulnerability of Microsoft Office packages, Microsoft 365 Apps, Microsoft Excel, and Microsoft SharePoint lies in the lack of data protection measures, which allows attackers to gain unauthorized access to devices.

The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps, Microsoft Excel, and Microsoft SharePoint are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to devices...

5.5CVSS6.2AI score0.04621EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/02/11 9:15 p.m.8 views

CVE-2021-46363

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel...

9.3CVSS7.9AI score0.01874EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/11 9:15 p.m.9 views

CVE-2021-46363

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel...

7.8CVSS6.3AI score0.01874EPSS
SaveExploits1References2
NVD
NVD
added 2022/02/11 9:15 p.m.29 views

CVE-2021-46363

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel...

9.3CVSS0.01874EPSS
SaveExploits1References2
Prion
Prion
added 2022/02/11 9:15 p.m.19 views

Design/Logic Flaw

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel...

9.3CVSS7.9AI score0.01874EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/02/11 8:08 p.m.35 views

CVE-2021-46363

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel...

8.1AI score0.01874EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/02/10 12:00 a.m.59 views

Microsoft Excel Information Disclosure Vulnerability (CNVD-2022-22710)

Microsoft Excel is an Office suite of spreadsheet processing software from the U.S. Microsoft Excel has an information disclosure vulnerability, and no details of the vulnerability are available...

5.5CVSS1.6AI score0.04621EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/09 5:15 p.m.25 views

CVE-2022-22716

Microsoft Excel Information Disclosure Vulnerability...

5.5CVSS0.04621EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/09 5:15 p.m.9 views

CVE-2022-22716

Microsoft Excel Information Disclosure Vulnerability...

5.5CVSS6.4AI score0.04621EPSS
SaveExploits0References4Affected Software10
Prion
Prion
added 2022/02/09 5:15 p.m.21 views

Information disclosure

Microsoft Excel Information Disclosure Vulnerability...

4.3CVSS5.3AI score0.04621EPSS
SaveExploits0References1Affected Software5
Rows per page
Query Builder