Multiple vulnerabilities in Microsoft Office

Descripción

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Visual Studio Tools for Office Runtime can be exploited remotely to spoof user interface.
2. A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
4. An information disclosure vulnerability in Microsoft SharePoint Server can be exploited remotely to obtain sensitive information.
5. A remote code execution vulnerability in Microsoft Outlook can be exploited remotely to execute arbitrary code.
6. A remote code execution vulnerability in Microsoft Teams can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
9. A spoofing vulnerability in Microsoft Outlook can be exploited remotely to spoof user interface.

Notas informativas originales

• CVE-2023-36897

• CVE-2023-35372
• CVE-2023-36891
• CVE-2023-36894
• CVE-2023-36895
• CVE-2023-36865
• CVE-2023-36890
• CVE-2023-29330
• CVE-2023-36896
• CVE-2023-35371
• CVE-2023-29328
• CVE-2023-36866
• CVE-2023-36893
• CVE-2023-36892
• ADV230003

Productos relacionados

• Microsoft-Office
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-SharePoint

Lista CVE

• CVE-2023-36897
  high
• CVE-2023-35372
  critical
• CVE-2023-36891
  critical
• CVE-2023-36894
  high
• CVE-2023-36895
  critical
• CVE-2023-36865
  critical
• CVE-2023-36890
  high
• CVE-2023-29330
  critical
• CVE-2023-36896
  critical
• CVE-2023-35371
  critical
• CVE-2023-29328
  critical
• CVE-2023-36866
  critical
• CVE-2023-36893
  high
• CVE-2023-36892
  critical

Lista KB

• 5002453
• 5002459
• 5002437
• 5002435
• 5002422
• 5002464
• 5002451
• 5002445
• 5002398
• 5002436
• 5002463
• 5002449
• 5002462
• 5002391
• 5002439
• 5002328
• 4504720
• 4484489
• 5002417
• 5002418
• 5002399
• 5002465
• 5002565

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com