Multiple vulnerabilities in Microsoft Office

説明

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft SharePoint Server can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Microsoft OneNote can be exploited remotely to spoof user interface.
4. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
5. A denial of service vulnerability in Microsoft SharePoint can be exploited remotely to cause denial of service.
6. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Microsoft Outlook can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Autodesk® FBX® SDK 2020 can be exploited remotely to execute arbitrary code.
9. Heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 can be exploited remotely to execute arbitrary code.

オリジナルアドバイザリー

• CVE-2023-33142

• CVE-2023-33133
• CVE-2023-33140
• CVE-2023-33132
• CVE-2023-33129
• CVE-2023-33137
• CVE-2023-33130
• CVE-2023-33146
• CVE-2023-29357
• CVE-2023-32029
• CVE-2023-33131
• CVE-2023-27909
• CVE-2023-27911

エクスプロイテーション

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

関連製品

• Microsoft-Office
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-SharePoint

CVEリスト

• CVE-2023-27909
  critical
• CVE-2023-27911
  critical
• CVE-2023-33142
  high
• CVE-2023-33133
  critical
• CVE-2023-33140
  high
• CVE-2023-33132
  high
• CVE-2023-33129
  high
• CVE-2023-33137
  critical
• CVE-2023-33130
  high
• CVE-2023-33146
  critical
• CVE-2023-29357
  critical
• CVE-2023-32029
  critical
• CVE-2023-33131
  critical

KBリスト

• 5002402
• 5002416
• 5002405
• 5002403
• 5002387
• 5002382
• 5002404
• 5002401
• 5002414
• 5002565

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com