Multiple vulnerabilities in Microsoft Office

Descrição

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Visual Studio Tools for Office Runtime can be exploited remotely to spoof user interface.
2. A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
4. An information disclosure vulnerability in Microsoft SharePoint Server can be exploited remotely to obtain sensitive information.
5. A remote code execution vulnerability in Microsoft Outlook can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Microsoft Teams can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
9. A spoofing vulnerability in Microsoft Outlook can be exploited remotely to spoof user interface.

Comunicados originais

• CVE-2023-36897

• CVE-2023-35372
• CVE-2023-36891
• CVE-2023-36894
• CVE-2023-36895
• CVE-2023-36865
• CVE-2023-36890
• CVE-2023-29330
• CVE-2023-36896
• CVE-2023-35371
• CVE-2023-29328
• CVE-2023-36866
• CVE-2023-36893
• CVE-2023-36892
• ADV230003

Produtos relacionados

• Microsoft-Office
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-SharePoint

Lista de CVE

• CVE-2023-36897
  high
• CVE-2023-35372
  critical
• CVE-2023-36891
  critical
• CVE-2023-36894
  high
• CVE-2023-36895
  critical
• CVE-2023-36865
  critical
• CVE-2023-36890
  high
• CVE-2023-29330
  critical
• CVE-2023-36896
  critical
• CVE-2023-35371
  critical
• CVE-2023-29328
  critical
• CVE-2023-36866
  critical
• CVE-2023-36893
  high
• CVE-2023-36892
  critical

Lista de KB

• 5002453
• 5002459
• 5002437
• 5002435
• 5002422
• 5002464
• 5002451
• 5002445
• 5002398
• 5002436
• 5002463
• 5002449
• 5002462
• 5002391
• 5002439
• 5002328
• 4504720
• 4484489
• 5002417
• 5002418
• 5002399
• 5002465
• 5002565

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com