Multiple vulnerabilities in Microsoft Office

Description

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities

1. Out-of-bounds read can be exploited remotely via a specially designed file to obtain sensitive information;
2. An improper memory objects handling can be exploited remotely via a specially designed content to execute arbitrary code.

Original advisories

• MS16-133

• CVE-2016-7213
• CVE-2016-7236
• CVE-2016-7235
• CVE-2016-7234
• CVE-2016-7233
• CVE-2016-7232
• CVE-2016-7231
• CVE-2016-7228
• CVE-2016-7229
• CVE-2016-7230
• CVE-2016-7245
• CVE-2016-7244

Related products

• Microsoft-Office
• Microsoft-Sharepoint-Server

CVE list

• CVE-2016-7213
  critical
• CVE-2016-7236
  critical
• CVE-2016-7235
  critical
• CVE-2016-7234
  critical
• CVE-2016-7233
  warning
• CVE-2016-7232
  critical
• CVE-2016-7231
  critical
• CVE-2016-7228
  critical
• CVE-2016-7229
  critical
• CVE-2016-7230
  critical
• CVE-2016-7245
  critical
• CVE-2016-7244
  warning

KB list

• 3127951
• 3127950
• 3127953
• 3127948
• 3118395
• 3198798
• 3118396
• 3118390
• 3115120
• 3127929
• 3118378
• 3127927
• 3127921
• 3127889
• 3127904
• 3127949
• 3127954
• 3115153
• 3118382
• 3118381
• 3115135
• 3198807
• 3127893
• 3127962
• 2986253
• 3127932

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com