Multiple vulnerabilities in Microsoft Office

Beschreibung

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Office can be exploited remotely via specially designed document file to obtain sensitive information;
2. An information disclosure vulnerability in Microsoft Outlook can be exploited remotely via specially crafted email to obtain sensitive information;
3. A remote code execution vulnerability in MSHTML Engine can be exploited remotely via specially crafted file to execute arbitrary code;
4. An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted webpage to gain privileges;
5. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface;
6. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface;
7. An elevation of privilege vulnerability in Skype for Android can be exploited remotely via specially designed request to gain privileges;
8. A remote code execution vulnerability in Microsoft Word can be exploited remotely via specially crafted file to execute arbitrary code;
9. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface;
10. An information disclosure vulnerability in Microsoft Word can be exploited remotely via specially designed document file to obtain sensitive information;

Ursprüngliche Informationshinweise

• CVE-2019-0560

• CVE-2019-0559
• CVE-2019-0541
• CVE-2019-0562
• CVE-2019-0556
• CVE-2019-0558
• CVE-2019-0622
• CVE-2019-0585
• CVE-2019-0557
• CVE-2019-0561
• CVE-2019-0538
• CVE-2019-0582

CVE Liste

• CVE-2019-0582
  critical
• CVE-2019-0538
  critical
• CVE-2019-0560
  critical
• CVE-2019-0559
  critical
• CVE-2019-0541
  critical
• CVE-2019-0562
  critical
• CVE-2019-0556
  critical
• CVE-2019-0558
  critical
• CVE-2019-0622
  critical
• CVE-2019-0585
  critical
• CVE-2019-0557
  critical
• CVE-2019-0561
  critical

KB Liste

• 4461614
• 4461535
• 4461537
• 4461623
• 4461595
• 4461601
• 3172522
• 4022162
• 4462112
• 2596760
• 2553332
• 4461634
• 4461598
• 4461591
• 4461596
• 4461624
• 4461594
• 4461612
• 4461543
• 4461625
• 4461633
• 4461617
• 4461620
• 4461589
• 4461635
• 4018313
• 4018300
• 4018294

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com