Page 4 of 565 results (0.002 seconds)

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 0

10 Jan 2023 — Microsoft Office Visio Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código en Microsoft Office Visio This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files.The issue results from the lack of proper validation of the length of u... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21737 • CWE-122: Heap-based Buffer Overflow •

CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0

10 Jan 2023 — Microsoft Office Visio Information Disclosure Vulnerability Vulnerabilidad de divulgación de información en Microsoft Office Visio • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21741 • CWE-125: Out-of-bounds Read •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0

13 Dec 2022 — Microsoft Office Visio Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Office Visio This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWG files. The issue results from the lack of validating the existence of... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44695 •

CVSS: 5.5EPSS: 0%CPEs: 12EXPL: 0

09 Nov 2022 — Microsoft Word Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Word • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41060 •

CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0

09 Nov 2022 — Microsoft Word Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Word • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41061 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0

09 Nov 2022 — Microsoft Excel Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Excel • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41063 •

CVSS: 5.5EPSS: 0%CPEs: 12EXPL: 0

09 Nov 2022 — Microsoft Word Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Word • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41103 •

CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0

09 Nov 2022 — Microsoft Excel Security Feature Bypass Vulnerability Vulnerabilidad de omisión de la función de seguridad de Microsoft Excel • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41104 •

CVSS: 9.0EPSS: 3%CPEs: 8EXPL: 0

09 Nov 2022 — Microsoft Excel Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Excel • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41106 •

CVSS: 7.8EPSS: 3%CPEs: 8EXPL: 0

11 Oct 2022 — Microsoft Office Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota de Microsoft Office This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DOCX files. Crafted data in a DOCX file can cause a pointer to be reused after it has been freed.... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38048 •