Page 3 of 565 results (0.003 seconds)

CVSS: 7.8EPSS: 2%CPEs: 8EXPL: 2

13 Jun 2023 — Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel and Microsoft 365 MSO version 2305 build 16.0.16501.20074 suffers from a remote code execution vulnerability. • https://packetstorm.news/files/id/173148 • CWE-415: Double Free •

CVSS: 7.8EPSS: 2%CPEs: 14EXPL: 0

13 Jun 2023 — Microsoft Excel Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32029 • CWE-125: Out-of-bounds Read •

CVSS: 7.6EPSS: 1%CPEs: 20EXPL: 0

09 May 2023 — Microsoft Word Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29335 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 3%CPEs: 9EXPL: 0

09 May 2023 — Microsoft Excel Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24953 • CWE-416: Use After Free •

CVSS: 7.8EPSS: 1%CPEs: 13EXPL: 2

14 Mar 2023 — Microsoft Excel Remote Code Execution Vulnerability Microsoft Excel 365 MSO version 2302 build 16.0.16130.20186 64-bit suffers from a remote code execution vulnerability. • https://packetstorm.news/files/id/171767 • CWE-125: Out-of-bounds Read •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 1

14 Mar 2023 — Microsoft Excel Spoofing Vulnerability Microsoft Excel suffers from a spoofing vulnerability. • https://packetstorm.news/files/id/171752 • CWE-290: Authentication Bypass by Spoofing •

CVSS: 10.0EPSS: 93%CPEs: 6EXPL: 32

14 Mar 2023 — Microsoft Outlook Elevation of Privilege Vulnerability Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user. • https://packetstorm.news/files/id/171376 • CWE-20: Improper Input Validation CWE-294: Authentication Bypass by Capture-replay •

CVSS: 7.8EPSS: 4%CPEs: 2EXPL: 1

14 Mar 2023 — Microsoft Excel Denial of Service Vulnerability • https://github.com/LucaBarile/CVE-2023-23396 • CWE-400: Uncontrolled Resource Consumption •

CVSS: 10.0EPSS: 89%CPEs: 12EXPL: 12

14 Feb 2023 — Microsoft Word Remote Code Execution Vulnerability • https://github.com/MojithaR/CVE-2023-21716-EXPLOIT.py • CWE-190: Integer Overflow or Wraparound •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

10 Jan 2023 — Microsoft Office Visio Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buf... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21736 • CWE-681: Incorrect Conversion between Numeric Types •