New Ursnif Variant Likely Shifting Focus to Ransomware and Data Theft

The Ursnif malware has become the latest malware to shed its roots as a banking trojan to revamp itself into a generic backdoor capable of delivering next-stage payloads, joining the likes of Emotet, Qakbot, and TrickBot. "This is a significant shift from the malware's original purpose to enable...

The vulnerability of Microsoft Excel editors, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Excel editors is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

Microsoft Excel Security Feature Bypass Vulnerability (CNVD-2023-53907)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel, which can be exploited by attackers to perform certain illegal operations...

Microsoft Excel Code Execution Vulnerability (CNVD-2023-53908)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Office Excel. The vulnerability arises from a failure of a network system or product to properly filter specific elements of externally entered data duri...

Security Updates for Microsoft Excel Products C2R (August 2022)

The Microsoft Excel Products are missing a security update. It is, therefore, affected by a security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the system/application. Note that...

Microsoft Excel 2016 Security Feature Bypass Vulnerability (KB5002232)

This host is missing an important security update according to Microsoft KB5002232 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 365 (2016 Click-to-Run) Multiple Remote Code Execution Vulnerabilities (Aug 2022)

This host is missing a critical security update according to Microsoft Office Click-to-Run update August 2022 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

CVE-2022-33648

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2022-33631

Microsoft Excel Security Feature Bypass Vulnerability...

CVE-2022-33631

Microsoft Excel Security Feature Bypass Vulnerability...

Security feature bypass

Microsoft Excel Security Feature Bypass Vulnerability...

Remote code execution

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2022-33648 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2022-33648

Microsoft Excel is affected by a remote code execution vulnerability tracked as CVE-2022-33648. The issue is described in multiple sources as an Excel vulnerability that can allow arbitrary code execution, with exploitation tied to a user action and local attack vector per CVSS details (AV:L, AC:...

CVE-2022-33631 Microsoft Excel Security Feature Bypass Vulnerability

...

CVE-2022-33631 Microsoft Excel Security Feature Bypass Vulnerability

...

CVE-2022-33631

Technical details about CVE-2022-33631 are not publicly available in the provided documents. Monitor for updates from official sources for affected products, vulnerable components, and fixes.

Description of the security update for Excel 2016: August 9, 2022 (KB5002232)

None None...

Description of the security update for Office Online Server: August 9, 2022 (KB5002228)

None None...

PT-2022-4109 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Excel, which can be exploited to circumvent existing security restrictions. This allows an attacker to affect the...