Page 2 of 81 results (0.003 seconds)

CVSS: 7.8EPSS: 1%CPEs: 7EXPL: 0

14 Nov 2023 — Microsoft Office Graphics Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de gráficos de Microsoft Office. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FBX files. The issue results from the lack of proper validation of user-... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36045 • CWE-822: Untrusted Pointer Dereference •

CVSS: 7.8EPSS: 20%CPEs: 9EXPL: 1

14 Nov 2023 — Microsoft Excel Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Excel. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36041 • CWE-416: Use After Free •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

14 Nov 2023 — Microsoft Office Security Feature Bypass Vulnerability Vulnerabilidad de omisión de la característica de seguridad de Microsoft Office. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36413 •

CVSS: 7.0EPSS: 0%CPEs: 4EXPL: 0

10 Oct 2023 — Microsoft Office Graphics Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Microsoft Office Graphics • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36565 • CWE-416: Use After Free •

CVSS: 7.0EPSS: 0%CPEs: 3EXPL: 0

10 Oct 2023 — Microsoft Office Click-To-Run Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Microsoft Office Click-To-Run • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36568 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 8.4EPSS: 0%CPEs: 3EXPL: 0

10 Oct 2023 — Microsoft Office Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Microsoft Office • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36569 • CWE-269: Improper Privilege Management •

CVSS: 7.8EPSS: 79%CPEs: 11EXPL: 0

12 Sep 2023 — Microsoft Word Information Disclosure Vulnerability Vulnerabilidad de Divulgación de Información de Microsoft Word Microsoft Word contains an unspecified vulnerability that allows for information disclosure. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36761 • CWE-20: Improper Input Validation •

CVSS: 7.3EPSS: 0%CPEs: 11EXPL: 0

12 Sep 2023 — Microsoft Word Remote Code Execution Vulnerability Vulnerabilidad de Ejecución Remota de Código de Microsoft Word • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36762 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 3%CPEs: 8EXPL: 0

12 Sep 2023 — Microsoft Outlook Information Disclosure Vulnerability Vulnerabilidad de Divulgación de Información de Microsoft Outlook • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36763 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.5EPSS: 0%CPEs: 11EXPL: 0

12 Sep 2023 — Microsoft Office Spoofing Vulnerability Vulnerabilidad de Suplantación de Identidad en Microsoft Office • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41764 • CWE-347: Improper Verification of Cryptographic Signature •