CVSS: 7.8EPSS: 33%CPEs: 6EXPL: 0CVE-2019-0801 – Microsoft Office Protocol Handler Directory Traversal File Creation Vulnerability
https://notcve.org/view.php?id=CVE-2019-0801
09 Apr 2019 — A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'. Existe una vulnerabilidad de ejecución remota de código en Microsoft Office, cuando maneja de... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0801 • CWE-19: Data Processing Errors •
CVSS: 6.5EPSS: 16%CPEs: 11EXPL: 0CVE-2019-0669
https://notcve.org/view.php?id=CVE-2019-0669
05 Mar 2019 — An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'. Existe una vulnerabilidad de divulgación de información cuando Microsoft Excel no muestra correctamente los contenidos de su memoria. Esto también se conoce como "Microsoft Excel Information Disclosure Vulnerability". • http://www.securityfocus.com/bid/106897 •
CVSS: 5.5EPSS: 8%CPEs: 9EXPL: 0CVE-2019-0540
https://notcve.org/view.php?id=CVE-2019-0540
05 Mar 2019 — A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'. Existe una vulnerabilidad de omisión de la característica de seguridad cuando Microsoft Office no valida las URL. Un atacante podría enviar un archivo especialmente manipulado a una víctima, lo que podría engañarlo para que introduzca sus crede... • http://www.securityfocus.com/bid/106863 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 9.3EPSS: 36%CPEs: 6EXPL: 0CVE-2019-0672 – Microsoft Access Database Engine ACECORE Out-Of-Bounds Write Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2019-0672
20 Feb 2019 — A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0671, CVE-2019-0673, CVE-2019-0674, CVE-2019-0675. Existe una vulnerabilidad de ejecución remota de código cuando el motor de conectividad de Microsoft Office Access gestiona de manera incorrecta los objetos en memoria. Esto también se conoce como "Micr... • http://www.securityfocus.com/bid/106929 •
CVSS: 9.3EPSS: 40%CPEs: 6EXPL: 0CVE-2019-0671 – Microsoft Access Database Engine ACEEXCL Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2019-0671
12 Feb 2019 — A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0672, CVE-2019-0673, CVE-2019-0674, CVE-2019-0675. Existe una vulnerabilidad de ejecución remota de código cuando el motor de conectividad de Microsoft Office Access gestiona de manera incorrecta los objetos en la memoria. Esto también se conoce como "M... • http://www.securityfocus.com/bid/106928 •
CVSS: 9.3EPSS: 36%CPEs: 6EXPL: 0CVE-2019-0673 – Microsoft Access Database Engine ACEEXCL Out-Of-Bounds Read Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2019-0673
12 Feb 2019 — A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0671, CVE-2019-0672, CVE-2019-0674, CVE-2019-0675. Existe una vulnerabilidad de ejecución remota de código cuando el motor de conectividad de Microsoft Office Access gestiona de manera incorrecta los objetos en memoria. Esto también se conoce como "Micr... • http://www.securityfocus.com/bid/106930 •
CVSS: 9.3EPSS: 40%CPEs: 6EXPL: 0CVE-2019-0674 – Microsoft Access Database Engine ACEEXCL Out-Of-Bounds Write Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2019-0674
12 Feb 2019 — A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0671, CVE-2019-0672, CVE-2019-0673, CVE-2019-0675. Existe una vulnerabilidad de ejecución remota de código cuando el motor de conectividad de Microsoft Office Access gestiona de manera incorrecta los objetos en memoria. Esto también se conoce como "Micr... • http://www.securityfocus.com/bid/106931 •
CVSS: 5.5EPSS: 12%CPEs: 12EXPL: 0CVE-2019-0561
https://notcve.org/view.php?id=CVE-2019-0561
08 Jan 2019 — An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word. Existe una vulnerabilidad de divulgación de información cuando se utilizan los botones de macros de Microsoft Word de manera indebida. Esto también se conoce como "Microsoft Edge Information Disclosure Vulnerability". Esto afecta a Microsoft Word, Office 365 ProPlus, Microsoft ... • http://www.securityfocus.com/bid/106399 •
CVSS: 9.3EPSS: 29%CPEs: 24EXPL: 0CVE-2019-0582 – Microsoft Windows JET Database Engine Uninitialized Pointer Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2019-0582
08 Jan 2019 — A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0538, CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0... • http://www.securityfocus.com/bid/106433 •
CVSS: 9.3EPSS: 37%CPEs: 16EXPL: 0CVE-2019-0585 – Microsoft Office Word wwlib Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2019-0585
08 Jan 2019 — A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Word cuando no gestiona correctamente objetos en la memoria.... • http://www.securityfocus.com/bid/106392 •