KLA12525
Multiple vulnerabilities in Microsoft Office

Обновлено: 17/05/2022
Дата обнаружения
10/05/2022
Уровень угрозы
Warning
Описание

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
  2. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.
  3. A security feature bypass vulnerability in Microsoft Office can be exploited remotely to bypass security restrictions.
Пораженные продукты

Microsoft Office
Microsoft 365

Решение

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Первичный источник обнаружения
CVE-2022-29109
CVE-2022-29108
CVE-2022-29107
CVE-2022-29110
Оказываемое влияние
?
ACE 
[?]

SB 
[?]
Связанные продукты
Microsoft Office
CVE-IDS
CVE-2022-291095.0Critical
CVE-2022-291085.0Critical
CVE-2022-291075.0Critical
CVE-2022-291105.0Critical
Microsoft official advisories
Microsoft Security Update Guide
KB list

4493152
5002195
5002204
5002194
5002196
5002205
5002199
5002207
4484347
5002203
5002187
5002184

Узнай статистику распространения уязвимостей в твоем регионе