Multiple vulnerabilities in Microsoft Office

Описание

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft Jet Red Database Engine and Access Connectivity Engine can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Microsoft Office Graphics can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Microsoft Office Trust Center can be exploited remotely to spoof user interface.
4. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
5. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.
6. An information disclosure vulnerability in Visual Basic for Applications can be exploited remotely to obtain sensitive information.
7. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
8. An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely to gain privileges.

Первичный источник обнаружения

• CVE-2021-42293
  CVE-2021-43875
  CVE-2021-43255
  CVE-2021-42320
  CVE-2021-42294
  CVE-2021-42309
  CVE-2021-42295
  CVE-2021-43242
  CVE-2021-43256
  CVE-2021-43876
  

Связанные продукты

• Microsoft-Office
• Microsoft-Excel
• Microsoft-SharePoint

Список CVE

• CVE-2021-42293
  warning
• CVE-2021-43875
  high
• CVE-2021-43255
  warning
• CVE-2021-42320
  warning
• CVE-2021-42294
  high
• CVE-2021-42309
  high
• CVE-2021-42295
  warning
• CVE-2021-43242
  warning
• CVE-2021-43256
  high
• CVE-2021-43876
  high

Список KB

• 5002054
• 5002047
• 4504710
• 4504745
• 5002101
• 5002045
• 5002015
• 5002099
• 5002033
• 5002103
• 4486726
• 5002059
• 5002008
• 5002055
• 5002098
• 5002061
• 5002097
• 5002105
• 5002071
• 5002104

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com