CVE-2021-40472 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2021-40472 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2021-40472

CVE-2021-40472 is an information-disclosure vulnerability in Microsoft Excel. The NVD entry lists CVSS v3.1 impact: confidentiality HIGH with LOCAL attack vector, low complexity, and no user interaction (base score 5.5). CVSS v2.0 reflects a lower base score (2.1). The connected documents confirm...

CVE-2021-40471 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2021-40472: Undefined Security Weakness

Microsoft Excel Information Disclosure Vulnerability...

CVE-2021-40479: Undefined Security Weakness

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2021-40471: Undefined Security Weakness

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2021-40473: Undefined Security Weakness

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2021-40485: Improper Control of Generation of Code

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2021-40474: Undefined Security Weakness

Microsoft Excel Remote Code Execution Vulnerability...

Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB5002043)

This host is missing an important security update according to Microsoft KB5002043 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2016 Multiple Vulnerabilities (KB5002030)

This host is missing an important security update according to Microsoft KB5002030 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Vulnerability Spotlight: Use-after-free vulnerability in Microsoft Excel could lead to code execution

Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered a use-after-free vulnerability in the ConditionalFormatting functionality of Microsoft Office Excel 2019 that could allow an attacker to execute arbitrary code on the... This i...

Description of the security update for Office Web Apps Server 2013: October 12, 2021 (KB5002036)

None None...

Description of the security update for Excel 2016: October 12, 2021 (KB5002030)

None None...

Description of the security update for Office 2013: October 12, 2021 (KB5001985)

Description of the security update for Office 2013: October 12, 2021 KB5001985 Summary This security update resolves a Microsoft Excel information disclosure vulnerability and Microsoft Excel remote code execution vulnerabilities. To learn more about the vulnerabilities, see the following securit...

PT-2021-4435 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to an information disclosure vulnerability in Microsoft Excel. This vulnerability can be exploited by attackers to obtain sensitive information and potentially...

PT-2021-4701 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Office affected versions not specified Description: The issue is related to the use of memory after it has been freed,...

Microsoft Excel 代码注入漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Excel. The vulnerability arises from a network system or product not properly filtering specific elements of externally entered data during t...

PT-2021-4393 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Excel, allowing a remote attacker to potentially elevate their privileges. This can enable remote attackers...