Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Word can be exploited remotely to execute arbitrary code.
2. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in Microsoft Publisher can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2023-28311

• CVE-2023-28288
• CVE-2023-28285
• CVE-2023-28287
• CVE-2023-28295

Related products

• Microsoft-Office
• Microsoft-SharePoint

CVE list

• CVE-2023-28311
  critical
• CVE-2023-28288
  critical
• CVE-2023-28285
  critical
• CVE-2023-28287
  critical
• CVE-2023-28295
  critical

KB list

• 5002385
• 5002383
• 5002221
• 5002381
• 5002213
• 5002373
• 5002375

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com