Lucene search
K

140 matches found

NCSC
NCSC
added 2023/09/12 12:0 a.m.1 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to execute attacks that can lead to the following categories of damage: Circumvention of security measure. Remote code execution User rights Spoofing Access to sensitive data...

9.8CVSS6.8AI score0.05532EPSS
Exploits0
NCSC
NCSC
added 2023/08/08 12:0 a.m.2 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to execute arbitrary code with the victim's privileges, or to impersonate another user and potentially gain access gain access to sensitive data. These updates also additionally...

8.8CVSS7.7AI score0.92973EPSS
Exploits3
NCSC
NCSC
added 2023/07/11 12:0 a.m.2 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several MS Office products. A malicious party could exploit the vulnerabilities to execute attacks that can lead to the following categories of damage: Circumvention of security measure. Remote code execution User rights Spoofing Access to sensitive data...

9.6CVSS7.1AI score0.12371EPSS
Exploits4
NCSC
NCSC
added 2023/06/13 12:0 a.m.8 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to execute attacks that could result in the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Spoofing Increased user privileges In order to...

9.8CVSS9.1AI score0.94356EPSS
Exploits20
NCSC
NCSC
added 2023/04/11 12:0 a.m.3 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious person could exploit the vulnerabilities to execute arbitrary code with the victim's privileges. The malicious party must trick the victim into opening a malicious file to open. The vulnerability in Sharepoint allows an...

8.1CVSS7AI score0.09091EPSS
Exploits10
NCSC
NCSC
added 2023/03/15 12:0 a.m.6 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. The vulnerabilities allow a malicious person to perform execute attacks that can result in the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Spoofing Access to sensitive data Increased user...

9.8CVSS8.6AI score0.93375EPSS
Exploits24
NCSC
NCSC
added 2023/01/11 12:0 a.m.6 views

Vulnerabilities fixed in Microsoft Office

Vulnerabilities have been fixed in Microsoft Office. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Circumvention of security measure. Remote code execution User rights Access to sensitive data Microsoft Office:...

8.8CVSS6.9AI score0.37362EPSS
Exploits1
NCSC
NCSC
added 2022/08/09 12:0 a.m.1 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Office, Excel, and Outlook. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Microsoft indicates that f...

8.8CVSS7.1AI score0.10967EPSS
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2022/03/08 9:8 p.m.149 views

Patch Tuesday - March 2022

Microsoft's March 2022 updates include fixes for 92 CVEs including 21 from the Chromium project, which is used by their Edge web browser. None of them have been seen exploited in the wild, but three have been previously disclosed. CVE-2022-24512, affecting .NET and Visual Studio, and...

9CVSS1.4AI score0.79123EPSS
Exploits5
NCSC
NCSC
added 2022/03/08 12:0 a.m.1 views

Vulnerabilities fixed in Microsoft Office

Vulnerabilities have been fixed in Microsoft Office products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Manipulation of data. Circumvention of security measure Remote code execution User rights Access to...

7.8CVSS7AI score0.02463EPSS
Exploits0
NCSC
NCSC
added 2022/02/08 12:0 a.m.6 views

Vulnerabilities fixed in Microsoft Office

Vulnerabilities have been fixed in Microsoft Office products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Spoofing...

8.8CVSS7.5AI score0.12797EPSS
Exploits1
NCSC
NCSC
added 2021/12/14 12:0 a.m.3 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in several Office products. A malicious party could exploit the vulnerabilities to execute attacks that could result in the following categories of damage: Remote code execution User rights Spoofing Access to sensitive data Increased user privileges The tables...

9.6CVSS7.2AI score0.07347EPSS
Exploits0
NCSC
NCSC
added 2021/11/09 12:0 a.m.1 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Microsoft Office. The vulnerabilities allow a malicious party to execute arbitrary execute arbitrary code under user privileges or circumvent a security measure to bypass Excel. The vulnerability with reference CVE-2021-42292 has been actively exploited...

7.8CVSS7.4AI score0.35487EPSS
Exploits1
NCSC
NCSC
added 2021/10/12 12:0 a.m.1 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Office products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Remote code execution User Rights Spoofing Access to sensitive data The vulnerability with reference...

8.8CVSS7.6AI score0.06497EPSS
Exploits0
NCSC
NCSC
added 2021/07/13 12:0 a.m.3 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Office products. The vulnerabilities allow a malicious party to carry out attacks execute attacks that lead to the following categories of damage: Bypassing security measure. Remote code execution User rights Spoofing Accessing sensitive data Microsoft Offic...

8.8CVSS7.1AI score0.09094EPSS
Exploits0
ThreatPost
ThreatPost
added 2021/06/07 6:49 p.m.677 views

Novel ‘Victory’ Backdoor Spotted in Chinese APT Campaign

An ongoing surveillance operation has been uncovered that targets a Southeast Asian government, researchers said – using a previously unknown espionage malware. According to Check Point Research, the attack involves spear-phishing emails with malicious Word documents to gain initial access, along...

9.3CVSS9.2AI score0.94354EPSS
Exploits36References8
NCSC
NCSC
added 2021/04/13 12:0 a.m.3 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Office products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Accessing sensitive data. Execution of arbitrary code User Rights Denial-of-Service Below is a summary of the...

7.8CVSS7AI score0.17031EPSS
Exploits1
NCSC
NCSC
added 2021/03/09 12:0 a.m.3 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Office products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Circumvention of security measure. Accessing sensitive data Executing arbitrary code User privileges...

9.3CVSS6.7AI score0.17098EPSS
Exploits0
NCSC
NCSC
added 2021/02/09 12:0 a.m.3 views

Vulnerabilities fixed in Microsoft Office

Microsoft has fixed vulnerabilities in Office products. A malicious party could exploit the vulnerabilities to cause a denial-of-service, obtain sensitive data, impersonate another user, and/or execute arbitrary code with user privileges. Below is a summary of the various vulnerabilities describe...

8.8CVSS6.4AI score0.25909EPSS
Exploits1
CNVD
CNVD
added 2021/02/07 12:0 a.m.5 views

SoftMaker Office PlanMaker Buffer Overflow Vulnerability (CNVD-2021-14028)

SoftMaker Office PlanMaker is a spreadsheet suite in office software that supports multiple platforms. A buffer overflow vulnerability exists in the SoftMaker Office PlanMaker Version/Instance 0x0005/0x0016 field handling, which can be exploited by an attacker to crash the application or execute...

8.8CVSS7.9AI score0.00258EPSS
Exploits1References1
Rows per page
Query Builder