CVSS: 9.0EPSS: 47%CPEs: 4EXPL: 1CVE-2024-21378 – Microsoft Outlook Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-21378
13 Feb 2024 — Microsoft Outlook Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Outlook • https://github.com/d0rb/CVE-2024-21378 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.8EPSS: 1%CPEs: 9EXPL: 0CVE-2024-20673 – Microsoft Office Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-20673
13 Feb 2024 — Microsoft Office Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Office • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20673 • CWE-693: Protection Mechanism Failure •
CVSS: 10.0EPSS: 92%CPEs: 4EXPL: 20CVE-2024-21413 – Microsoft Outlook Improper Input Validation Vulnerability
https://notcve.org/view.php?id=CVE-2024-21413
13 Feb 2024 — Microsoft Outlook Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Outlook Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode. • https://github.com/DevAkabari/CVE-2024-21413 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 1%CPEs: 4EXPL: 0CVE-2024-21379 – Microsoft Word Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-21379
13 Feb 2024 — Microsoft Word Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Word This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can r... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21379 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 2%CPEs: 4EXPL: 0CVE-2024-20677 – Microsoft Office Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-20677
09 Jan 2024 — A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feature enabled will no longer have access to it. This includes Office 2019, Office 2021, Office LTSC for Mac 2021, and Microsoft 365. As of February 13, 2024, the ability to insert FBX files has also been disabled in 3D Viewer. 3D models in Office documen... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20677 • CWE-122: Heap-based Buffer Overflow •
CVSS: 5.3EPSS: 6%CPEs: 1EXPL: 0CVE-2023-35619 – Microsoft Outlook for Mac Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2023-35619
12 Dec 2023 — Microsoft Outlook for Mac Spoofing Vulnerability Vulnerabilidad de suplantación de identidad en Microsoft Outlook para Mac • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35619 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 32%CPEs: 4EXPL: 1CVE-2023-35636 – Microsoft Outlook Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-35636
12 Dec 2023 — Microsoft Outlook Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Outlook • https://github.com/duy-31/CVE-2023-35636 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0CVE-2023-36009 – Microsoft Word Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-36009
12 Dec 2023 — Microsoft Word Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Word • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36009 •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2023-48677
https://notcve.org/view.php?id=CVE-2023-48677
12 Dec 2023 — Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901. Escalada de privilegios locales debido a una vulnerabilidad de secuestro de DLL. Los siguientes productos se ven afectados: Acronis Cyber Protect Home Office (Windows) anterior a la compilación 40901. Local privilege escalation due to DLL hijacking vulnerability. • https://security-advisory.acronis.com/advisories/SEC-5620 • CWE-427: Uncontrolled Search Path Element •
CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2023-36037 – Microsoft Excel Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2023-36037
14 Nov 2023 — Microsoft Excel Security Feature Bypass Vulnerability Vulnerabilidad de omisión de la función de seguridad de Microsoft Excel. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36037 •