CVSS: 9.3EPSS: 97%CPEs: 25EXPL: 1CVE-2019-0541 – Microsoft MSHTML Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2019-0541
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus. Existe una vulnerabilidad de ejecución remota de código debido a la forma en la que el motor MSHTML valida indebidamente las entradas. Esto también se conoce como "MSHTML Engine Remote Code Execution Vulnerability". Esto afecta a Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10 y Office 365 ProPlus. • https://www.exploit-db.com/exploits/46536 http://www.securityfocus.com/bid/106402 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0541 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 5.5EPSS: 0%CPEs: 12EXPL: 0CVE-2018-8627
https://notcve.org/view.php?id=CVE-2018-8627
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8598. Existe una vulnerabilidad de divulgación de información cuando el software de Microsoft Excel lee memoria fuera de límites debido a una variable no inicializada, que podría divulgar el contenido de la memoria. Esto también se conoce como "Microsoft Excel Information Disclosure Vulnerability". • http://www.securityfocus.com/bid/106120 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8627 • CWE-908: Use of Uninitialized Resource •
CVSS: 4.7EPSS: 0%CPEs: 6EXPL: 0CVE-2018-8598 – Microsoft Office Excel XLS File Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2018-8598
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8627. Existe una vulnerabilidad de divulgación de información cuando Microsoft Excel no muestra correctamente los contenidos de su memoria. Esto también se conoce como "Microsoft Excel Information Disclosure Vulnerability". • http://www.securityfocus.com/bid/106102 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8598 •
CVSS: 9.3EPSS: 7%CPEs: 6EXPL: 0CVE-2018-8636
https://notcve.org/view.php?id=CVE-2018-8636
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8597. Existe una vulnerabilidad de ejecución remota de código en Microsoft Excel cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsoft Excel Remote Code Execution Vulnerability". • http://www.securityfocus.com/bid/106101 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8636 •
CVSS: 9.3EPSS: 5%CPEs: 10EXPL: 0CVE-2018-8597 – Microsoft Office Excel XLS File Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2018-8597
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8636. Existe una vulnerabilidad de ejecución remota de código en Microsoft Excel cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsoft Excel Remote Code Execution Vulnerability". • http://www.securityfocus.com/bid/106100 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8597 •