Kaspersky ID:
KLA11745
Дата обнаружения:
14/04/2020
Обновлено:
22/01/2024

Описание

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Microsoft (MAU) Office can be exploited remotely to gain privileges.
  2. A remote code execution vulnerability in Microsoft Word can be exploited remotely via specially crafted file to execute arbitrary code.
  3. A remote code execution vulnerability in Microsoft Office Access Connectivity Engine can be exploited remotely via specially crafted file to execute arbitrary code.
  4. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted web to spoof user interface.
  5. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted to execute arbitrary code.
  6. A remote code execution vulnerability in Microsoft Excel can be exploited remotely via specially crafted file to execute arbitrary code.
  7. A remote code execution vulnerability in Microsoft Office can be exploited remotely via specially crafted to execute arbitrary code.
  8. A remote code execution vulnerability in Microsoft Office can be exploited remotely via specially crafted file to execute arbitrary code.
  9. A spoofing vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted web to spoof user interface.
  10. An elevation of privilege vulnerability in OneDrive for Windows can be exploited remotely via specially crafted application to gain privileges.

Первичный источник обнаружения

Эксплуатация

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

Список CVE

  • CVE-2020-0984
    warning
  • CVE-2020-0980
    critical
  • CVE-2020-0961
    critical
  • CVE-2020-0924
    warning
  • CVE-2020-0925
    warning
  • CVE-2020-0926
    warning
  • CVE-2020-0927
    warning
  • CVE-2020-0920
    high
  • CVE-2020-0923
    warning
  • CVE-2020-0906
    critical
  • CVE-2020-0929
    high
  • CVE-2020-0760
    high
  • CVE-2020-0991
    critical
  • CVE-2020-0979
    critical
  • CVE-2020-0978
    warning
  • CVE-2020-0977
    warning
  • CVE-2020-0976
    warning
  • CVE-2020-0975
    warning
  • CVE-2020-0974
    high
  • CVE-2020-0973
    warning
  • CVE-2020-0972
    warning
  • CVE-2020-0971
    high
  • CVE-2020-0954
    warning
  • CVE-2020-0933
    warning
  • CVE-2020-0932
    high
  • CVE-2020-0931
    high
  • CVE-2020-0930
    warning
  • CVE-2020-0935
    warning

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.