Description of the security update for Visio 2013: December 13, 2022 (KB5002280)

Description of the security update for Visio 2013: December 13, 2022 KB5002280 Summary This security update resolves a Microsoft Office Visio remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-44695. Note: To app...

Microsoft Office Visio Remote Code Execution Vulnerability

...

Microsoft Office Visio Remote Code Execution Vulnerability

...

Microsoft Office Visio Remote Code Execution Vulnerability

...

CVE-2022-44694: Undefined Security Weakness

Microsoft Office Visio Remote Code Execution Vulnerability...

CVE-2022-44696: Undefined Security Weakness

Microsoft Office Visio Remote Code Execution Vulnerability...

Vulnerabilities fixed in Microsoft Office

Vulnerabilities have been fixed in Microsoft Office. The vulnerabilities allow a malicious person to impersonate as another user, to execute arbitrary code under the user's privileges or obtain elevated privileges. To exploit the vulnerabilities marked CVE-2022-44690 and CVE-2022-44693 CVSS 8.8,...

CVE-2022-44695 Microsoft Office Visio Remote Code Execution Vulnerability

...

CVE-2022-44695

Technical details about CVE-2022-44695 are not publicly provided in the supplied connected documents. Available items reference the CVE and notes about Visio remote code execution and December 2022 updates, but do not specify affected versions, root cause, or fixes.

Microsoft Office Visio 安全漏洞

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system. Microsoft Office Visio is vulnerable to remote code execution. An attacker could exploit the vulnerability to execute code on the target host...

PT-2022-5969

Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description The issue is related to insufficient input validation in Microsoft Office Visio, which can be exploited by an attacker to execute arbitrary code using a specially crafted DWG...

CVE-2022-44694 Microsoft Office Visio Remote Code Execution Vulnerability

...

CVE-2022-44694

Technical details about CVE-2022-44694 are not publicly provided in the supplied documents. Monitor official advisories and follow up for specific impact, affected products, and patch guidance as more information becomes available.

Microsoft Office Visio 安全漏洞

Microsoft Office Visio is responsible for drawing flowcharts and schematic diagrams in the Office software series of the American Microsoft Microsoft company. A remote code execution vulnerability exists in Microsoft Office Visio, which can be exploited by an attacker to execute arbitrary code on...

CVE-2022-44696 Microsoft Office Visio Remote Code Execution Vulnerability

...

PT-2022-6011

Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description The issue is related to a buffer overflow in memory, which can be exploited by an attacker to execute arbitrary code using specially crafted DXF and DWG files. Recommendations ...

CVE-2022-44696 Microsoft Office Visio Remote Code Execution Vulnerability

...

CVE-2022-44696

CVE-2022-44696 is a Microsoft Office Visio Remote Code Execution vulnerability affecting Visio components across multiple Office/Visio editions. The provided documents indicate potential arbitrary code execution with a LOCAL exploit vector and USER INTERACTION REQUIRED (CVSS v3.1: AV:L/AC:L/PR:N/...

Microsoft Office Visio 安全漏洞

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system. Microsoft Office Visio is vulnerable to remote code execution. An attacker could exploit the vulnerability to execute code on the target host...

PT-2022-5971

Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description The issue is related to a use-after-free vulnerability in Microsoft Office Visio, which can be exploited by using a specially crafted DWG file. This can allow an attacker to...