Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Office Graphics can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.
3. A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
4. A spoofing vulnerability in Microsoft Outlook for Mac can be exploited remotely to spoof user interface.
5. A remote code execution vulnerability in Microsoft Office OneNote can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2022-26806

• CVE-2022-26805
• CVE-2022-44693
• CVE-2022-47211
• CVE-2022-26804
• CVE-2022-44695
• CVE-2022-44694
• CVE-2022-44696
• CVE-2022-44690
• CVE-2022-44713
• CVE-2022-47212
• CVE-2022-44691
• CVE-2022-47213
• CVE-2022-44692

Related products

• Microsoft-Office
• Microsoft-SharePoint

CVE list

• CVE-2022-26806
  critical
• CVE-2022-26805
  critical
• CVE-2022-44693
  critical
• CVE-2022-47211
  critical
• CVE-2022-26804
  critical
• CVE-2022-44695
  critical
• CVE-2022-44694
  critical
• CVE-2022-44696
  critical
• CVE-2022-44690
  critical
• CVE-2022-44713
  critical
• CVE-2022-47212
  critical
• CVE-2022-44691
  critical
• CVE-2022-47213
  critical
• CVE-2022-44692
  critical

KB list

• 5002280
• 5002327
• 5002319
• 5002321
• 5002286
• 5002317
• 5002311

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com