Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft SharePoint can be exploited remotely to obtain sensitive information.
2. An elevation of privilege vulnerability in Microsoft Office can be exploited remotely to gain privileges.
3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
4. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
5. A remote code execution vulnerability in Microsoft Access can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely to execute arbitrary code.
7. An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely to gain privileges.

Original advisories

• CVE-2024-49062

• CVE-2024-49064
• CVE-2024-49059
• CVE-2024-49065
• CVE-2024-43600
• CVE-2024-49069
• CVE-2024-49142
• CVE-2024-49070
• CVE-2024-49068

Related products

• Microsoft-Access
• Microsoft-Office
• Microsoft-Excel
• Microsoft-Word
• Microsoft-SharePoint

CVE list

• CVE-2024-49062
  high
• CVE-2024-49064
  high
• CVE-2024-49059
  high
• CVE-2024-49065
  high
• CVE-2024-43600
  high
• CVE-2024-49069
  high
• CVE-2024-49142
  high
• CVE-2024-49070
  high
• CVE-2024-49068
  high

KB list

• 5002657
• 5002641
• 5002660
• 5002661
• 4475587
• 5002659
• 5002658
• 2920716
• 5002544
• 5002664

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com