Description
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, execute arbitrary code, gain privileges.
Below is a complete list of vulnerabilities:
- A spoofing vulnerability in Microsoft Office can be exploited remotely to spoof user interface.
- An information disclosure vulnerability in Copilot Studio can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
Original advisories
Related products
CVE list
- CVE-2024-43609 high
- CVE-2024-43610 high
- CVE-2024-43616 critical
- CVE-2024-43503 critical
- CVE-2024-43504 critical
- CVE-2024-43505 critical
- CVE-2024-43576 critical
KB list
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!