PT-2022-1706 · Microsoft · Office Word +1

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Word. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the...

KLA12414 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary...

Microsoft Word 代码注入漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

Security Updates for Microsoft Word Products (January 2022)

The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21842 %NASLMINLEVEL 70300 C...

Hackers Increasingly Using RTF Template Injection Technique in Phishing Attacks

Three different state-sponsored threat actors aligned with China, India, and Russia have been observed adopting a new method called RTF aka Rich Text Format template injection as part of their phishing campaigns to deliver malware to targeted systems. "RTF template injection is a novel technique...

Security Updates for Microsoft Word Products C2R (November 2021)

The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-42296 %NASLMINLEVEL 70300 C...

CVE-2021-42296

Microsoft Word Remote Code Execution Vulnerability...

CVE-2021-42296

Microsoft Word Remote Code Execution Vulnerability...

Remote code execution

Microsoft Word Remote Code Execution Vulnerability...

CVE-2021-42296

Microsoft Word Remote Code Execution Vulnerability...

CVE-2021-42296 Microsoft Word Remote Code Execution Vulnerability

...

CVE-2021-42296

CVE-2021-42296 is a Microsoft Word remote code execution vulnerability affecting Microsoft Word/Office products. The NVD entry lists CVSSv3.1 base score 7.8 (HIGH) with LOCAL access, user interaction required, and impact to confidentiality/integrity/availability (HIGH). OpenVAS/Nessus references ...

Microsoft Word 代码注入漏洞

Microsoft Word is a word processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Word. The following products and editions are affected: Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft 365 Apps for Enterprise for...

KLA12337 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Microsoft Excel can be exploited remotely ...

PT-2021-5086 · Microsoft · Office Word +2

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Office and Microsoft 365 Apps for Enterprise packages. Exploitation of this issue may allow an attacker to...

The vulnerability of Microsoft Word’s text editor, related to improper handling of code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Word relates to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Word Code Execution Vulnerability (CNVD-2025-17491)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

CVE-2021-40486

Microsoft Word Remote Code Execution Vulnerability...

CVE-2021-40486

Microsoft Word Remote Code Execution Vulnerability...

Remote code execution

Microsoft Word Remote Code Execution Vulnerability...