Page 5 of 258 results (0.004 seconds)

CVSS: 7.8EPSS: 3%CPEs: 11EXPL: 0

11 Jul 2023 — Microsoft ActiveX Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33152 • CWE-122: Heap-based Buffer Overflow •

CVSS: 7.8EPSS: 2%CPEs: 11EXPL: 0

11 Jul 2023 — Microsoft Outlook Spoofing Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33151 •

CVSS: 10.0EPSS: 1%CPEs: 9EXPL: 0

11 Jul 2023 — Microsoft Office Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33150 • CWE-693: Protection Mechanism Failure •

CVSS: 7.8EPSS: 3%CPEs: 13EXPL: 0

11 Jul 2023 — Microsoft Office Graphics Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33149 • CWE-416: Use After Free •

CVSS: 10.0EPSS: 1%CPEs: 5EXPL: 3

11 Jul 2023 — Microsoft Office Elevation of Privilege Vulnerability Microsoft Office 365 version 18.2305.1222.0 suffers from a remote code execution vulnerability when a malicious link is clicked on in a Word file. • https://packetstorm.news/files/id/173591 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 7.8EPSS: 1%CPEs: 5EXPL: 0

17 Jun 2023 — Microsoft Publisher Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28295 • CWE-190: Integer Overflow or Wraparound •

CVSS: 7.8EPSS: 2%CPEs: 5EXPL: 0

17 Jun 2023 — Microsoft Publisher Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28287 • CWE-416: Use After Free •

CVSS: 7.8EPSS: 1%CPEs: 11EXPL: 0

13 Jun 2023 — Microsoft Excel Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33133 • CWE-122: Heap-based Buffer Overflow •

CVSS: 10.0EPSS: 10%CPEs: 9EXPL: 2

13 Jun 2023 — Microsoft Outlook Remote Code Execution Vulnerability Microsoft Outlook suffers from a remote code execution via a maliciously crafted word file. • https://packetstorm.news/files/id/173361 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 7.8EPSS: 3%CPEs: 4EXPL: 0

13 Jun 2023 — Microsoft Office Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage th... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33146 • CWE-122: Heap-based Buffer Overflow •