Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
2. A remote code execution vulnerability in Microsoft Office Graphics can be exploited remotely to execute arbitrary code.
3. A security feature bypass vulnerability in Microsoft Word can be exploited remotely to bypass security restrictions.

Original advisories

• CVE-2024-49030

• CVE-2024-49026
• CVE-2024-49032
• CVE-2024-49031
• CVE-2024-49033
• CVE-2024-49029
• CVE-2024-49027
• CVE-2024-49028
• ADV240001

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Office
• Microsoft-Excel
• Microsoft-Word

CVE list

• CVE-2024-49030
  critical
• CVE-2024-49026
  critical
• CVE-2024-49032
  critical
• CVE-2024-49031
  critical
• CVE-2024-49033
  critical
• CVE-2024-49029
  critical
• CVE-2024-49027
  critical
• CVE-2024-49028
  critical

KB list

• 5002654
• 5002642
• 5002648
• 5002653
• 5002650
• 5002651
• 5002619

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com