18 matches found
CVE-2017-0281
CVE-2017-0281 / CVE-2017-0262 describe a remote code execution flaw in Microsoft Office and related components triggered by memory handling errors while processing specially crafted Office files (EPS in particular). Affected products include Office 2010 SP2, Office 2013 SP1, Office 2016, and broa...
CVE-2018-8284
CVE-2018-8284 is a remote code execution vulnerability in the Microsoft .NET Framework caused by improper input validation. The NVD entry lists affected runtimes across multiple versions (e.g., .NET Framework 2.0/3.0/3.5/3.5.1 and 4.x releases up to 4.7.2, including 4.6.x and 4.7.x). Microsoft MS...
CVE-2020-0954
Technical details for CVE-2020-0954 are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2017-11876
CVE-2017-11876 affects Microsoft Project Server and SharePoint Enterprise Server 2016. The vulnerability arises from improper session handling that enables cross-site request forgery, allowing an attacker to read restricted content and impersonate the victim to perform actions (e.g., change permi...
CVE-2015-2503
CVE-2015-2503 is an Office Elevation of Privilege vulnerability that can be triggered via a crafted web site loaded in Internet Explorer to bypass sandbox protections and gain privileges. The initial CVE entry lists Microsoft Office 2007–2016 products (Word, Excel, PowerPoint, Access, InfoPath, V...
CVE-2014-0251
CVE-2014-0251 affects Microsoft SharePoint products including Windows SharePoint Services 3.0 SP3, SharePoint Server 2007 SP3, 2010 SP1/SP2, 2013 Gold/SP1, SharePoint Foundation 2010 SP1/SP2/2013 Gold/SP1, Project Server 2010 SP1/SP2/2013 Gold/SP1, Web Applications 2010 SP1/SP2, Office Web Apps S...
CVE-2018-0909
Technical details for CVE-2018-0909, including affected products and remediation, are not publicly provided in the connected documents. Monitor official advisories for updates on impact and fixes.
CVE-2017-8551
CVE-2017-8551 is a Microsoft SharePoint Server elevation-of-privilege vulnerability caused by improper sanitization of crafted web requests, enabling potential cross-site scripting and actions on behalf of a user. Affected products include SharePoint Server (and SharePoint-related components) wit...
CVE-2015-1640
CVE-2015-1640 describes a cross-site scripting (XSS) vulnerability impacting Microsoft Project Server 2010 SP2 and 2013 SP1, attributed to insufficient input filtering in SharePoint/Project Server components. The core issue is improper sanitization of crafted requests that allows an attacker to i...
CVE-2018-0944
Technical details for CVE-2018-0944 are not publicly available in the provided connected documents. Monitor for updates; based on current inputs, no concrete affected products, versions, exploit info, or remediation are disclosed here.
CVE-2018-0914
Technical details about CVE-2018-0914 are not publicly available in the provided documents. The connected EUVD entries mention malware without giving affected products, root cause, impact, or remediation for this CVE. Monitor for updates.
CVE-2018-0911
Technical details about CVE-2018-0911 are not publicly available in the provided documents; monitor for updates.
CVE-2018-0915
Technical details are not publicly available in the provided documents for CVE-2018-0915; no product/version specifics or remediation are disclosed here. Monitor for updates from official sources.
CVE-2018-8156
CVE-2018-8156 is a Microsoft SharePoint Server elevation-of-privilege issue. Connected sources confirm the vulnerability arises when SharePoint Server (and related Project Server variants) fails to properly filter specially crafted web requests, enabling an attacker to escalate privileges. Severa...
CVE-2018-0916
Technical details for CVE-2018-0916 are not publicly available in the provided documents; monitor for updates from official advisories.
CVE-2018-0912
No technical details for CVE-2018-0912 are present in the provided documents. Monitor for updates as more information becomes available.
CVE-2018-0910
Technical details about CVE-2018-0910 are not publicly available in the provided documents; the connected EUVD entries refer to malware and do not specify affected products, impact, or remediation. Monitor for updates.