Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Outlook can be exploited remotely to obtain sensitive information.
2. An information disclosure vulnerability in Microsoft Word can be exploited remotely to obtain sensitive information.
3. A spoofing vulnerability in Microsoft Outlook for Mac can be exploited remotely to spoof user interface.

Original advisories

• CVE-2023-35636

• CVE-2023-36009
• CVE-2023-35619

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Office

CVE list

• CVE-2023-35636
  high
• CVE-2023-36009
  high
• CVE-2023-35619
  high

KB list

• 5002520
• 5002529

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com