Multiple vulnerabilities in Microsoft Office

Beschreibung

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Visual Studio Tools for Office Runtime can be exploited remotely to spoof user interface.
2. A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
4. An information disclosure vulnerability in Microsoft SharePoint Server can be exploited remotely to obtain sensitive information.
5. A remote code execution vulnerability in Microsoft Outlook can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Microsoft Teams can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
9. A spoofing vulnerability in Microsoft Outlook can be exploited remotely to spoof user interface.

Ursprüngliche Informationshinweise

• CVE-2023-36897

• CVE-2023-35372
• CVE-2023-36891
• CVE-2023-36894
• CVE-2023-36895
• CVE-2023-36865
• CVE-2023-36890
• CVE-2023-29330
• CVE-2023-36896
• CVE-2023-35371
• CVE-2023-29328
• CVE-2023-36866
• CVE-2023-36893
• CVE-2023-36892
• ADV230003

Betroffene Produkte

• Microsoft-Office
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-SharePoint

CVE Liste

• CVE-2023-36897
  high
• CVE-2023-35372
  critical
• CVE-2023-36891
  critical
• CVE-2023-36894
  high
• CVE-2023-36895
  critical
• CVE-2023-36865
  critical
• CVE-2023-36890
  high
• CVE-2023-29330
  critical
• CVE-2023-36896
  critical
• CVE-2023-35371
  critical
• CVE-2023-29328
  critical
• CVE-2023-36866
  critical
• CVE-2023-36893
  high
• CVE-2023-36892
  critical

KB Liste

• 5002453
• 5002459
• 5002437
• 5002435
• 5002422
• 5002464
• 5002451
• 5002445
• 5002398
• 5002436
• 5002463
• 5002449
• 5002462
• 5002391
• 5002439
• 5002328
• 4504720
• 4484489
• 5002417
• 5002418
• 5002399
• 5002465
• 5002565

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com