1692 matches found
CVE-2021-31194
OLE Automation Remote Code Execution Vulnerability...
CVE-2021-31194
CVE-2021-31194 is described in the provided documents as an OLE Automation Remote Code Execution vulnerability in Windows. The NVD entry lists CVSSv3.1 base score 8.8 ( HIGH ) with network attack vector, low complexity, privileges required: LOW, and user interaction NONE, resulting in HIGH confid...
CVE-2021-31194 OLE Automation Remote Code Execution Vulnerability
...
May 11, 2021—KB5003172 (OS Build 10240.18932) - EXPIRED
None None...
May 11, 2021—KB5003174 (OS Build 17134.2208)
None None...
May 11, 2021—KB5003197 (OS Build 14393.4402) - EXPIRED
None None...
KLA12174 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...
Microsoft OLE Automation Remote code 代码注入漏洞
Microsoft OLE Automation Remote code is a software application from Microsoft Corporation USA. An automation software. A code injection vulnerability exists in Windows OLE. The following products and editions are affected: Windows Server 2008 for x64-based Systems Service Pack 2 Server Core...
[SECURITY] Fedora 32 Update: libxls-1.5.3-3.fc32
This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...
[SECURITY] Fedora 33 Update: libxls-1.6.1-2.fc33
This is libxls, a C library for reading Excel files in the old binary OLE format, plus a command-line tool for converting XLS to CSV named, appropriately enough, libxls2csv...
Microsoft Windows OLE Remote Code Execution Vulnerability (CNVD-2021-22931)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.OLE is a technology that allows applications to share data and...
KB4557957: Windows 10 Version 2004 June 2020 Security Update
The remote Windows host is missing security update 4557957. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute...
CVE-2020-1281
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'...
CVE-2020-1281
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'...
CVE-2020-1212
An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'OLE Automation Elevation of Privilege Vulnerability'...
CVE-2020-1212
An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'OLE Automation Elevation of Privilege Vulnerability'...
Remote code execution
A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'...
Privilege escalation
An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'OLE Automation Elevation of Privilege Vulnerability'...
CVE-2020-1281
CVE-2020-1281 correlates to a Microsoft Windows OLE Remote Code Execution vulnerability. CNVD-2021-22931 describes a flaw where Windows OLE fails to properly validate user input, enabling an attacker to execute arbitrary code via a crafted file or program. The initial description also notes remot...