Kaspersky ID:
KLA20157
Дата обнаружения:
10/01/2023
Обновлено:
25/01/2024

Описание

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
  2. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.
  3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
  4. A security feature bypass vulnerability in Microsoft SharePoint Server can be exploited remotely to bypass security restrictions.
  5. An information disclosure vulnerability in Microsoft Office Visio can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

Список CVE

  • CVE-2023-21737
    critical
  • CVE-2023-21742
    critical
  • CVE-2023-21744
    critical
  • CVE-2023-21734
    critical
  • CVE-2023-21738
    critical
  • CVE-2023-21735
    critical
  • CVE-2023-21743
    high
  • CVE-2023-21741
    high
  • CVE-2023-21736
    critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.