CVE-2016-7267

Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Security Feature Bypass Vulnerability."...

CVE-2016-7265

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to obtain sensitive information from process...

CVE-2016-7262

CVE-2016-7262 is a Microsoft Office vulnerability (Microsoft Excel family) described as a Security Feature Bypass: a crafted cell mishandled on click can allow user-assisted remote command execution. Affected products include Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, Office Compatibi...

PT-2016-7275

Name of the Vulnerable Software and Affected Versions Microsoft Excel for Mac versions 2011 through 2016 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted document. Recommendations For Microsoft Excel for Ma...

CVE-2016-7267: Improper Input Validation

Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Security Feature Bypass Vulnerability."...

CVE-2016-7266: Improper Input Validation

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry check, which allows user-assisted remote attackers to execute arbitrary commands via crafted embedded content in a...

CVE-2016-7262: Undefined Security Weakness

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature...

CVE-2016-7262

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka “Microsoft Office Security Feature...

CVE-2016-7265: Out-of-bounds Read

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to obtain sensitive information from process...

CVE-2016-7263: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-7264: Out-of-bounds Read

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read via a crafted document, aka "Microsoft Office Information...

Microsoft Excel Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory. An attacker who successfully exploited the vulnerability could view out of bound memory. Exploitation of the...

Microsoft Office CVE-2016-7266 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft Exc...

PT-2016-7278

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer Excel 2016 for Mac Description A security feature bypass issue exists when Microsoft Office improperly checks registry settings, allowing an...

PT-2016-3429 · Microsoft · Office Compatibility Pack +3

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer version not specified Description: The issue is related to insufficient input validation in Microsoft Excel, allowing an attacker to execute...

PT-2016-7277

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer Excel Services on SharePoint Server versions 2007 SP3 through 2010 SP2 Description The issue allows remote attackers to obtain sensitive...

Microsoft Office CVE-2016-7276 Information Disclosure Vulnerability

Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2016 for Mac Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service...

PT-2016-7276

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 Office Compatibility Pack version SP3 Excel Viewer affected versions not specified Excel for Mac version 2011 Excel 2016 for Mac affected versions not specified Description The issue allows remote attackers to...

PT-2016-7279

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 Description A security feature bypass issue exists in Microsoft Office software due to improper handling of file formats. This issue does not directly allow arbitrary code...

Microsoft Office Executable Code

The vulnerability of Microsoft Word, the Microsoft Office Compatibility Pack, Microsoft Office programs, and Microsoft Excel spreadsheet editors is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary cod...