説明
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, execute arbitrary code, gain privileges.
Below is a complete list of vulnerabilities:
- A spoofing vulnerability in Microsoft Office can be exploited remotely to spoof user interface.
- An information disclosure vulnerability in Copilot Studio can be exploited remotely to obtain sensitive information.
- A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
- An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely to gain privileges.
- A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2024-43609 high
- CVE-2024-43610 high
- CVE-2024-43616 critical
- CVE-2024-43503 critical
- CVE-2024-43504 critical
- CVE-2024-43505 critical
- CVE-2024-43576 critical
KBリスト
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！