Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Visual Studio Tools for Office Runtime can be exploited remotely to spoof user interface.
2. A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
4. An information disclosure vulnerability in Microsoft SharePoint Server can be exploited remotely to obtain sensitive information.
5. A remote code execution vulnerability in Microsoft Outlook can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Microsoft Teams can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
9. A spoofing vulnerability in Microsoft Outlook can be exploited remotely to spoof user interface.

Original advisories

• CVE-2023-36897

• CVE-2023-35372
• CVE-2023-36891
• CVE-2023-36894
• CVE-2023-36895
• CVE-2023-36865
• CVE-2023-36890
• CVE-2023-29330
• CVE-2023-36896
• CVE-2023-35371
• CVE-2023-29328
• CVE-2023-36866
• CVE-2023-36893
• CVE-2023-36892
• ADV230003

Related products

• Microsoft-Office
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-SharePoint

CVE list

• CVE-2023-36897
  high
• CVE-2023-35372
  critical
• CVE-2023-36891
  critical
• CVE-2023-36894
  high
• CVE-2023-36895
  critical
• CVE-2023-36865
  critical
• CVE-2023-36890
  high
• CVE-2023-29330
  critical
• CVE-2023-36896
  critical
• CVE-2023-35371
  critical
• CVE-2023-29328
  critical
• CVE-2023-36866
  critical
• CVE-2023-36893
  high
• CVE-2023-36892
  critical

KB list

• 5002453
• 5002459
• 5002437
• 5002435
• 5002422
• 5002464
• 5002451
• 5002445
• 5002398
• 5002436
• 5002463
• 5002449
• 5002462
• 5002391
• 5002439
• 5002328
• 4504720
• 4484489
• 5002417
• 5002418
• 5002399
• 5002465
• 5002565

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com