CVE-2017-0243

CVE-2017-0243 is a Microsoft Office remote code execution vulnerability caused by how Office handles objects in memory. An attacker could trigger RCE by convincing a user to open a crafted document. The entry notes this CVE is distinct from CVE-2017-8570. From the metrics, the CVSS v3 base score ...

CVE-2020-0931

CVE-2020-0931 is a remote code execution vulnerability in Microsoft SharePoint caused by the product failing to validate the source markup of an application package. The connected Nessus findings describe this as part of a set of SharePoint vulnerabilities, noting several RCEs that involve upload...

CVE-2021-27076

CVE-2021-27076 is a remote code execution flaw in Microsoft SharePoint Server (2019, 2016, 2013 SP1, Foundation) caused by improper code generation management. Attackers with low privileges can execute arbitrary code. CIRCL records active exploitation since March 2021, with proof-of-concept code ...

CVE-2020-0795

CVE-2020-0795 concerns Microsoft SharePoint Reflective Cross-Site Scripting. The vulnerability arises when SharePoint Server fails to properly sanitize a specially crafted request, allowing an authenticated attacker to exploit an XSS condition. It is distinct from CVE-2020-0891. Connected sources...

CVE-2019-0558

CVE-2019-0558 describes a cross-site scripting (XSS) vulnerability in Microsoft SharePoint-related servers caused by improper sanitization of crafted web requests. Affected products include Microsoft SharePoint Server and SharePoint components. The initial documents provide CVSS metrics (base sco...