Remote code execution

A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8742...

Privilege escalation

Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint XSS Vulnerability"...

CVE-2017-8745

An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Cross Site Scripting Vulnerability"...

CVE-2017-8743

CVE-2017-8743 affects Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server. The vulnerability arises from improper handling of objects in memory, enabling remote code execution. The CVSS details in the initial record indicate a HIGH impact with local/re...

CVE-2017-8629

Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint XSS Vulnerability"...

CVE-2017-8745

CVE-2017-8745 is an elevation-of-privilege vulnerability in Microsoft SharePoint Foundation 2013 SP1 caused by improper sanitization of a specially crafted web request to the SharePoint server (cross-site scripting). Public details in connected sources confirm the issue is associated with the Sha...

CVE-2017-8629

CVE-2017-8629 affects Microsoft SharePoint Server 2013 SP1 and is an elevation of privilege vulnerability caused by improper sanitization of crafted web requests, enabling cross-site scripting and potential unauthorized actions in the user’s security context. Connected sources confirm the vulnera...

CVE-2017-8743

A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8742...

CVE-2017-8743: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8742...

CVE-2017-8742: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft...

Remote Code Execution Vulnerability in Multiple Microsoft Products

Microsoft PowerPoint 2007 SP3 are products of Microsoft Corporation.Microsoft PowerPoint 2007 SP3 is a document presentation tool in the Office suite; SharePoint Server 2013 SP1 is an enterprise business collaboration platform; Office Web Apps 2010 SP2 is a Web-based office software suite. A remo...

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2017-27431)

Microsoft SharePoint Server 2013 is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enables you to share work, collaborate with others, organize projects and workgroups, and search for people and information. A cross-site...

CVE-2017-8745: Improper Neutralization of Input During Web Page Generation

An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Cross Site Scripting Vulnerability"...

Microsoft PowerPoint, SharePoint Enterprise Server and Office Online Server Remote Code Execution Vulnerability

Microsoft PowerPoint 2016, SharePoint Enterprise Server 2016, and Office Online Server are products of Microsoft Corporation.Microsoft PowerPoint 2016 is the Office suite of Microsoft PowerPoint 2016 is a document presentation tool in the Office suite; SharePoint Enterprise Server 2016 is a set o...

Microsoft SharePoint Foundation Cross-Site Scripting Vulnerability (CNVD-2017-32621)

Microsoft SharePoint Foundation is the United States Microsoft Microsoft company's set of Web-based collaboration platform for small organizations or departments. A cross-site scripting vulnerability exists in Microsoft SharePoint Foundation 2013 SP1, which originates from the program failing to...

CVE-2017-8629: Improper Neutralization of Input During Web Page Generation

Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint XSS Vulnerability"...

Microsoft SharePoint Enterprise Server 2016 Multiple Vulnerabilities (KB4011127)

This host is missing an important security update according to Microsoft KB4011127 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Foundation 2013 Service Pack 1 Elevation of Privilege Vulnerability (KB4011117)

This host is missing an important security update according to Microsoft KB4011117 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Server 2007 Service Pack 3 Remote Code Execution Vulnerability (KB3191831)

This host is missing an important security update according to Microsoft KB3191831. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Server 2013 Service Pack 1 Remote Code Execution Vulnerability (KB3213560)

This host is missing an important security update according to Microsoft KB3213560 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...