Multiple vulnerabilities in Microsoft Office

Описание

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft SharePoint Server can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
3. A spoofing vulnerability in Microsoft OneNote can be exploited remotely to spoof user interface.
4. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
5. A denial of service vulnerability in Microsoft SharePoint can be exploited remotely to cause denial of service.
6. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
7. A remote code execution vulnerability in Microsoft Outlook can be exploited remotely to execute arbitrary code.
8. A remote code execution vulnerability in Autodesk® FBX® SDK 2020 can be exploited remotely to execute arbitrary code.
9. Heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

• CVE-2023-33142
  CVE-2023-33133
  CVE-2023-33140
  CVE-2023-33132
  CVE-2023-33129
  CVE-2023-33137
  CVE-2023-33130
  CVE-2023-33146
  CVE-2023-29357
  CVE-2023-32029
  CVE-2023-33131
  CVE-2023-27909
  CVE-2023-27911
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Office
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-SharePoint

Список CVE

• CVE-2023-27909
  critical
• CVE-2023-27911
  critical
• CVE-2023-33142
  high
• CVE-2023-33133
  critical
• CVE-2023-33140
  high
• CVE-2023-33132
  high
• CVE-2023-33129
  high
• CVE-2023-33137
  critical
• CVE-2023-33130
  high
• CVE-2023-33146
  critical
• CVE-2023-29357
  critical
• CVE-2023-32029
  critical
• CVE-2023-33131
  critical

Список KB

• 5002402
• 5002416
• 5002405
• 5002403
• 5002387
• 5002382
• 5002404
• 5002401
• 5002414

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com