CVE-2020-0979

CVE-2020-0979 is a Microsoft Excel remote code execution vulnerability caused by improper handling of memory objects. The connected Nessus docs (SMB_NT_MS20_APR_EXCEL_C2R.NASL and related plugins) confirm Excel RCE tied to memory object handling and indicate April 2020 Office updates address CVE-...

CVE-2020-0906

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979...

CVE-2020-0906

Microsoft Excel contains a remote code execution vulnerability (CVE-2020-0906) where the application fails to properly handle objects in memory, allowing code to run in the attacker’s context. The Nessus updates describe Excel-specific RCEs and note that Office products were missing updates as of...

Microsoft Excel XLSM File Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

Microsoft Excel 2016 Remote Code Execution Vulnerabilities (KB4484273)

This host is missing an important security update according to Microsoft KB4484273 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Apr 2020)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Excel 2010 Service Pack 2 Remote Code Execution Vulnerabilities (KB4484285)

This host is missing an important security update according to Microsoft KB4484285 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4484260)

This host is missing an important security update according to Microsoft KB4484260 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2013 Remote Code Execution Vulnerabilities (KB4484283)

This host is missing an important security update according to Microsoft KB4484283 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel XLS File Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...

Security Update for Microsoft Excel 2013 (KB4484283) 32-Bit Edition

A security vulnerability exists in Microsoft Excel 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Excel 2016 (KB4484273) 32-Bit Edition

A security vulnerability exists in Microsoft Excel 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for Office 2010: April 14, 2020

Description of the security update for Office 2010: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...

Description of the security update for Office 2013: April 14, 2020

Description of the security update for Office 2013: April 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microsoft...

Description of the security update for Office 2016: April 14, 2020

None None...

Security Updates for Microsoft Excel Products (April 2020)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data...

MS15-046: Description of the security update for Microsoft Excel 2010: June 9, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Excel file.INTRODUCTIONMicrosoft has released security bulletin MS15-046. To learn more about this security bulletin: Home...

MS15-022: Description of the security update for Microsoft Excel 2010: March 10, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file in an affected version of Office software.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an...

MS15-022: Description of the security update for Microsoft Excel 2007 Service Pack 3: March 10, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or previ...

MS15-012: Description of the security update for Microsoft Excel 2010: February 10, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Office file in an affected version of Office software.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could...