Multiple vulnerabilities in Microsoft Office

Açıklama

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted web to spoof user interface.
2. A remote code execution vulnerability in Microsoft Excel can be exploited remotely via specially crafted file to execute arbitrary code.
3. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely via specially crafted page to execute arbitrary code.
4. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted to execute arbitrary code.
5. An information disclosure vulnerability in Microsoft SharePoint can be exploited remotely to obtain sensitive information.
6. A spoofing vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted web to spoof user interface.

Orijinal öneriler

• CVE-2020-1099

• CVE-2020-0901
• CVE-2020-1069
• CVE-2020-1024
• CVE-2020-1100
• CVE-2020-1101
• CVE-2020-1023
• CVE-2020-1103
• CVE-2020-1102
• CVE-2020-1105
• CVE-2020-1104
• CVE-2020-1107
• CVE-2020-1106

Kötüye kullanma

Public exploits exist for this vulnerability.

İlgili ürünler

• Microsoft-Office
• Microsoft-Excel

CVE Listesi

• CVE-2020-1099
  high
• CVE-2020-0901
  critical
• CVE-2020-1069
  critical
• CVE-2020-1024
  critical
• CVE-2020-1100
  high
• CVE-2020-1101
  high
• CVE-2020-1023
  critical
• CVE-2020-1103
  high
• CVE-2020-1102
  critical
• CVE-2020-1105
  high
• CVE-2020-1104
  high
• CVE-2020-1107
  high
• CVE-2020-1106
  high

KB Listesi

• 4484364
• 4484383
• 4484338
• 4484336
• 4484384
• 4484332
• 4484365
• 4484352

Daha fazlasını okuyun

Bölgenizde yayılan güvenlik açıklarının istatistiklerini öğrenin statistics.securelist.com