Kaspersky ID:
KLA11287
Detect Date:
07/10/2018
Updated:
01/22/2024

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

  1. A tampering vulnerability in Microsoft Office can be exploited remotely to spoof user interface.
  2. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
  3. A remote code execution vulnerability in Skype for Business and Microsoft Lync can be exploited remotely to execute arbitrary code.
  4. A remote code execution vulnerability in Microsoft Access can be exploited remotely to execute arbitrary code.
  5. An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely to gain privileges.
  6. A security feature bypass vulnerability in Skype for Business and Lync can be exploited remotely to bypass security restrictions.
  7. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely to execute arbitrary code.
  8. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.

Original advisories

Related products

CVE list

  • CVE-2018-8310
    warning
  • CVE-2018-8281
    critical
  • CVE-2018-8311
    high
  • CVE-2018-8312
    critical
  • CVE-2018-8323
    warning
  • CVE-2018-8238
    critical
  • CVE-2018-8300
    high
  • CVE-2018-8299
    warning
  • CVE-2018-8284
    critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.