CVE-2019-0672

CVE-2019-0672 is described in connected documents as a remote code execution against the Microsoft Office Access Connectivity Engine. The vulnerability occurs when the Access Connectivity Engine improperly handles objects in memory, allowing an attacker to execute arbitrary code by convincing a u...

CVE-2019-0822

CVE-2019-0822 is a remote code execution vulnerability in Microsoft Graphics Components related to how objects are handled in memory. Reports from MSRC and OpenVAS indicate exploitation requires a user to open a specially crafted file, enabling an attacker to execute arbitrary code on the target ...

CVE-2020-0696

Microsoft Outlook Security Feature Bypass (CVE-2020-0696) is described across multiple feeds as a vulnerability in how Outlook parses URI formats, categorized as a security feature bypass. No concrete exploit details, affected versions, or remediation steps are provided in the connected documents...

CVE-2018-8546

CVE-2018-8546 is a denial-of-service vulnerability in Skype for Business (also affecting Lync) caused by improper handling of emojis. An attacker could trigger a DoS by sending a sequence of emojis, causing the target service to stop responding. Microsoft’s MSRC advisory notes the fix addresses e...

CVE-2019-0801

CVE-2019-0801 is a remote code execution flaw in Microsoft Office triggered by opening a specially crafted URL file pointing to an Excel/PowerPoint file. Root cause: Office mishandles certain files, enabling code execution in the user context if the file is opened after download. The vulnerabilit...

CVE-2019-1112

CVE-2019-1112 — Microsoft Excel Information Disclosure Vulnerability : Multiple sources (NVD, Microsoft/MSRC, Red Hat, Tenable) describe an information disclosure flaw in Excel where memory contents can be exposed. Exploitation involves crafting a document and convincing a user to open it; the at...

CVE-2018-8627

CVE-2018-8627 (Microsoft Excel information disclosure) : An information-disclosure flaw in Excel when reading memory out of bounds due to an uninitialized variable. Affected products include Microsoft Office/Excel and related viewers. Exploitation requires opening a specially crafted file; succes...

CVE-2020-0653

CVE-2020-0653 is a Microsoft Excel remote code execution vulnerability caused by improper handling of in-memory objects. The vulnerability can allow code execution with the privileges of the current user, and exploitation may lead to system compromise if the user has sufficient rights and interac...

CVE-2019-0946

The provided documents identify CVE-2019-0946 as a remote code execution vulnerability affecting Microsoft Office Access Connectivity Engine, caused by improper handling of objects in memory. The Red Hat and NVD entries consistently describe a memory-handling flaw in the Access Connectivity Engin...

CVE-2018-8502

CVE-2018-8502 is an Excel remote code execution vulnerability in Microsoft Excel (and adjacent Office components) caused by improper handling of objects in Protected View. The issue allows arbitrary code execution in the context of the current user, with the attacker potentially gaining full cont...

CVE-2018-8504

CVE-2018-8504 is a remote code execution vulnerability in Microsoft Word (and related Office components) caused by improper handling of objects in Protected View. The issue allows code execution in the context of the currently logged-in user and is exploitable via typical Word/Office workflows; t...

CVE-2019-1463

CVE-2019-1463 is an information-disclosure vulnerability in Microsoft Access, arising when the application fails to properly handle objects in memory, enabling partial leakage of memory contents. The connected sources confirm the flaw is in Access and describe the impact as information disclosure...

CVE-2020-0697

CVE-2020-0697 is a Microsoft Office elevation-of-privilege flaw affecting the OLicenseHeartbeat task. An authenticated attacker could place a specially crafted file in a specific location to run the task with SYSTEM privileges, enabling arbitrary file corruption. The vulnerability is addressed by...

CVE-2020-0851

CVE-2020-0851 is a Microsoft Word remote code execution vulnerability. It stems from Word’s improper handling of in-memory objects, enabling an attacker to run code in the user’s security context when a specially crafted file is opened. The connected Nessus/plugin data corroborates that exploitat...

CVE-2019-0673

CVE-2019-0673 affects Microsoft Office Access Connectivity Engine. The vulnerability arises from improper handling of objects in memory, allowing remote code execution if a user opens a specially crafted file. This corresponds to a memory corruption issue in the Access Connectivity Engine and is ...

CVE-2018-8582

CVE-2018-8582 is a remote code execution flaw in Microsoft Outlook that arises when parsing specially crafted rule export files. The underlying issue is in Outlook’s handling of objects during parsing, allowing an attacker to execute arbitrary code on the affected system. A successful exploit cou...

CVE-2018-8522

CVE-2018-8522 is a remote code execution in Microsoft Outlook where the vulnerability arises from improper handling of objects in memory, allowing an attacker to run code with the current user’s privileges when a specially crafted file is processed. CVE-2018-8582 is another Outlook RCE triggered ...

CVE-2019-0824

CVE-2019-0824 is a remote code execution vulnerability in Microsoft Office Access Connectivity Engine caused by improper handling of memory objects. An attacker could trigger code execution by convincing a user to open a specially crafted file. The vulnerability affects the Office Access Connecti...

CVE-2019-0825

CVE-2019-0825 is Microsoft Office Access Connectivity Engine Remote Code Execution vulnerability. The vulnerability stems from improper handling of memory/objects by the Access Connectivity Engine, enabling arbitrary code execution when a user opens a specially crafted file. The issue is addresse...

CVE-2019-0827

CVE-2019-0827 concerns remote code execution in Microsoft Office Access Connectivity Engine due to improper handling of memory objects. The vulnerability is triggered when the engine mishandles objects in memory; exploitation could allow arbitrary code execution on a targeted system. Connected do...

CVE-2018-8575

CVE-2018-8575 is a remote code execution vulnerability in Microsoft Project family products (Microsoft Project, Office 365 ProPlus, Microsoft Project Server) arising when the program fails to properly handle objects in memory. The open-source and vulnerability feeds in the connected documents cor...

CVE-2019-1449

CVE-2019-1449 describes a security feature bypass in Office Click-to-Run (C2R) where specially crafted files can escalate from a standard user to SYSTEM within LPAC Protected View. Affected is the Office C2R handling component; exploitation requires user to open a crafted file. The CVSSv3.1 base ...

CVE-2018-8598

CVE-2018-8598 is an information disclosure vulnerability in Microsoft Excel where memory contents can be exposed. Affected products include Office 365 ProPlus, Microsoft Office, and Microsoft Excel. The root cause is that Excel improperly discloses its memory contents. According to the provided d...

CVE-2019-0674

CVE-2019-0674 is a remote code execution vulnerability affecting the Microsoft Office Access Connectivity Engine. The connected Nessus entry reiterates that this flaw occurs when the Access Connectivity Engine improperly handles objects in memory, enabling arbitrary code execution if a user opens...

CVE-2019-0826

CVE-2019-0826 is an RCE in the Microsoft Office Access Connectivity Engine caused by improper handling of memory objects. The vulnerability affects Microsoft Office components that use the Access Connectivity Engine, enabling an attacker to execute arbitrary code in the context of the user. The C...

CVE-2019-1199

CVE-2019-1199 affects Microsoft Outlook with a memory corruption flaw that allows remote code execution when a user opens a specially crafted file. Exploitation requires user interaction (opening a crafted file via email or a crafted web link); impact can enable arbitrary code execution in the cu...

CVE-2018-8427

CVE-2018-8427 is an information-disclosure vulnerability in Microsoft Graphics Components that affects Microsoft Office family products (Office, Word Viewer, PowerPoint/Excel Viewers, Office 365 ProPlus) and related Windows components (Windows Server 2008). The root cause involves improper handli...

CVE-2018-8524

CVE-2018-8524 is an Outlook remote code execution vulnerability affecting Office 365 ProPlus, Microsoft Office, and Microsoft Outlook. The weakness stems from improper handling of in-memory objects, enabling an attacker to execute arbitrary code via a specially crafted file or input, with the att...

CVE-2019-1204

CVE-2019-1204 affects Microsoft Outlook. It is an elevation of privilege that occurs when processing incoming messages due to insufficient validation of message formatting, potentially causing Outlook to load a local or remote message store from a crafted email. The update notes that Office fully...

CVE-2018-8558

CVE-2018-8558 is an information disclosure vulnerability in Microsoft Outlook related to not respecting the SharePoint Online Admin Center “Default link type” settings. Affected products include Office 365 ProPlus and Microsoft Office. Root cause, per available description, is improper handling o...

CVE-2018-8501

CVE-2018-8501 is a remote code execution flaw in Microsoft PowerPoint/Office caused by improper handling of objects in Protected View. The vulnerability allows a remote attacker to run arbitrary code in the context of the current user, with the potential for system compromise if the user has admi...

CVE-2018-8579

CVE-2018-8579 is described as an information disclosure vulnerability in Microsoft Outlook related to attaching files to messages. The affected products listed are Office 365 ProPlus and Microsoft Office. The provided sources indicate this CVE is distinct from CVE-2018-8558, but do not include co...

CVE-2018-8636

CVE-2018-8636 is a remote code execution vulnerability in Microsoft Excel (and related Office components) caused by improper handling of memory objects. Affected products include Office 365 ProPlus, Microsoft Office, and Microsoft Excel. The underlying issue is failure to properly manage in-memor...

CVE-2018-8576

CVE-2018-8576 is a remote code execution vulnerability in Microsoft Outlook that occurs when Outlook fails to properly handle objects in memory. Affected products include Office 365 ProPlus, Microsoft Office, and Microsoft Outlook. The underlying issue is improper handling of in-memory objects, e...