Multiple vulnerabilities in Microsoft Office

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Visual Studio Tools for Office Runtime can be exploited remotely to spoof user interface.
2. A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
4. An information disclosure vulnerability in Microsoft SharePoint Server can be exploited remotely to obtain sensitive information.
5. A remote code execution vulnerability in Microsoft Outlook can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Microsoft Teams can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
9. A spoofing vulnerability in Microsoft Outlook can be exploited remotely to spoof user interface.

Fiches de renseignement originales

• CVE-2023-36897

• CVE-2023-35372
• CVE-2023-36891
• CVE-2023-36894
• CVE-2023-36895
• CVE-2023-36865
• CVE-2023-36890
• CVE-2023-29330
• CVE-2023-36896
• CVE-2023-35371
• CVE-2023-29328
• CVE-2023-36866
• CVE-2023-36893
• CVE-2023-36892
• ADV230003

Produits associés

• Microsoft-Office
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-SharePoint

Liste CVE

• CVE-2023-36897
  high
• CVE-2023-35372
  critical
• CVE-2023-36891
  critical
• CVE-2023-36894
  high
• CVE-2023-36895
  critical
• CVE-2023-36865
  critical
• CVE-2023-36890
  high
• CVE-2023-29330
  critical
• CVE-2023-36896
  critical
• CVE-2023-35371
  critical
• CVE-2023-29328
  critical
• CVE-2023-36866
  critical
• CVE-2023-36893
  high
• CVE-2023-36892
  critical

Liste KB

• 5002453
• 5002459
• 5002437
• 5002435
• 5002422
• 5002464
• 5002451
• 5002445
• 5002398
• 5002436
• 5002463
• 5002449
• 5002462
• 5002391
• 5002439
• 5002328
• 4504720
• 4484489
• 5002417
• 5002418
• 5002399
• 5002465
• 5002565

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com