Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Office can be exploited remotely via specially designed document file to obtain sensitive information;
2. An information disclosure vulnerability in Microsoft Outlook can be exploited remotely via specially crafted email to obtain sensitive information;
3. A remote code execution vulnerability in MSHTML Engine can be exploited remotely via specially crafted file to execute arbitrary code;
4. An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted webpage to gain privileges;
5. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface;
6. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface;
7. An elevation of privilege vulnerability in Skype for Android can be exploited remotely via specially designed request to gain privileges;
8. A remote code execution vulnerability in Microsoft Word can be exploited remotely via specially crafted file to execute arbitrary code;
9. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface;
10. An information disclosure vulnerability in Microsoft Word can be exploited remotely via specially designed document file to obtain sensitive information;

Fiches de renseignement originales

• CVE-2019-0560

• CVE-2019-0559
• CVE-2019-0541
• CVE-2019-0562
• CVE-2019-0556
• CVE-2019-0558
• CVE-2019-0622
• CVE-2019-0585
• CVE-2019-0557
• CVE-2019-0561
• CVE-2019-0538
• CVE-2019-0582

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Produits associés

• Microsoft-Office
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-Word

Liste CVE

• CVE-2019-0582
  critical
• CVE-2019-0538
  critical
• CVE-2019-0560
  high
• CVE-2019-0559
  high
• CVE-2019-0541
  critical
• CVE-2019-0562
  high
• CVE-2019-0556
  high
• CVE-2019-0558
  high
• CVE-2019-0622
  warning
• CVE-2019-0585
  critical
• CVE-2019-0557
  high
• CVE-2019-0561
  high

Liste KB

• 4461614
• 4461535
• 4461537
• 4461623
• 4461595
• 4461601
• 3172522
• 4022162
• 4462112
• 2596760
• 2553332
• 4461634
• 4461598
• 4461591
• 4461596
• 4461624
• 4461594
• 4461612
• 4461543
• 4461625
• 4461633
• 4461617
• 4461620
• 4461589
• 4461635
• 4018313
• 4018300
• 4018294

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com