Remote code execution

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Microsoft Office. This CVE ID is unique from CVE-2018-8573...

CVE-2018-8539

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Microsoft Office. This CVE ID is unique from CVE-2018-8573...

CVE-2018-8568

The CVE-2018-8568/8572 family concerns Microsoft SharePoint Server. A vulnerability exists where SharePoint does not properly sanitize/filter a specially crafted web request sent to an affected SharePoint server, enabling an authenticated attacker to elevate privileges. Affected products: Microso...

CVE-2018-8558

An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is...

CVE-2018-8568

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

CVE-2018-8572

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

CVE-2018-8578

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint...

CVE-2018-8568

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

CVE-2018-8539

CVE-2018-8539 is a remote code execution vulnerability in Microsoft Word (affecting Word, Office, and SharePoint) caused by improper handling of objects in memory. The root cause is memory object handling defects that allow an attacker to trigger code execution in the security context of the curr...

CVE-2018-8578

CVE-2018-8578 affects Microsoft SharePoint Server, where information is disclosed by improperly rendering certain pages, revealing the folder structure/script paths loaded on the page. Root cause: improper disclosure of the site’s folder path information during page rendering. Impact: information...

CVE-2018-8558

CVE-2018-8558 is an information disclosure vulnerability in Microsoft Outlook related to not respecting the SharePoint Online Admin Center “Default link type” settings. Affected products include Office 365 ProPlus and Microsoft Office. Root cause, per available description, is improper handling o...

CVE-2018-8572

CVE-2018-8572 affects Microsoft SharePoint, specifically SharePoint Server and SharePoint. The vulnerability arises because the server does not properly sanitize/filter a specially crafted web request, enabling an authenticated attacker to elevate privileges on the affected SharePoint Server. Con...

CVE-2018-8558: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is...

CVE-2018-8539: Undefined Security Weakness

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Microsoft Office. This CVE ID is unique from CVE-2018-8573...

CVE-2018-8578: Undefined Security Weakness

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint...

CVE-2018-8572: Improper Neutralization of Input During Web Page Generation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

CVE-2018-8568: Improper Neutralization of Input During Web Page Generation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft...

Security Update for Microsoft SharePoint Foundation 2013 (KB4461511) farm-deployment

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Foundation 2013 (KB4461511)

A security vulnerability exists in Microsoft SharePoint Foundation 2013 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4461501) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...