Security Updates for Microsoft Excel Products C2R (February 2019)

The Microsoft Excel Products are missing security updates. They are, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the...

Microsoft Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XLS...

Security Updates for Microsoft Excel Products C2R (November 2021)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Improper Restriction of XML External Entity Reference in Apache POI

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity XXE Processing...

GHSA-2JVJ-MHF2-G99W SilverStripe CSV Excel Macro Injection

In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software including Microsoft Excel. For example, the CSV data may contai...

Microsoft Excel 2016 Remote Code Execution Vulnerability (KB5002196)

This host is missing a critical security update according to Microsoft KB5002196 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Excel 2013 Remote Code Execution Vulnerability (KB5002204)

This host is missing a critical security update according to Microsoft KB5002204 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2022-29109

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2022-29110

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2022-29110

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2022-29109

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2022-29110

Microsoft Excel Remote Code Execution Vulnerability...

Remote code execution

Microsoft Excel Remote Code Execution Vulnerability...

Remote code execution

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2022-29110 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2022-29109 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2022-29110: Undefined Security Weakness

Microsoft Excel Remote Code Execution Vulnerability...

KLA12525 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability ...