Multiple vulnerabilities in Microsoft Office

Descripción

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft SharePoint Server can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Microsoft OneNote can be exploited remotely to spoof user interface.
4. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
5. A denial of service vulnerability in Microsoft SharePoint can be exploited remotely to cause denial of service.
6. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Microsoft Outlook can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Autodesk® FBX® SDK 2020 can be exploited remotely to execute arbitrary code.
9. Heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 can be exploited remotely to execute arbitrary code.

Notas informativas originales

• CVE-2023-33142

• CVE-2023-33133
• CVE-2023-33140
• CVE-2023-33132
• CVE-2023-33129
• CVE-2023-33137
• CVE-2023-33130
• CVE-2023-33146
• CVE-2023-29357
• CVE-2023-32029
• CVE-2023-33131
• CVE-2023-27909
• CVE-2023-27911

Explotación

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Productos relacionados

• Microsoft-Office
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-SharePoint

Lista CVE

• CVE-2023-27909
  critical
• CVE-2023-27911
  critical
• CVE-2023-33142
  high
• CVE-2023-33133
  critical
• CVE-2023-33140
  high
• CVE-2023-33132
  high
• CVE-2023-33129
  high
• CVE-2023-33137
  critical
• CVE-2023-33130
  high
• CVE-2023-33146
  critical
• CVE-2023-29357
  critical
• CVE-2023-32029
  critical
• CVE-2023-33131
  critical

Lista KB

• 5002402
• 5002416
• 5002405
• 5002403
• 5002387
• 5002382
• 5002404
• 5002401
• 5002414
• 5002565

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com