An integer overflow or wraparound in Microsoft Office SharePoint Server allows remote code execution over the network. Microsoft rates the flaw Important with a CVSS score of 8.8. According to Microsoft, an attacker needs an authenticated account with Manage List permission, so anonymous internet attackers should not reach it directly. Risk increases where SharePoint is internet-facing, self-registration is enabled, credentials are weak or reused, or accounts with list rights are compromised.
Microsoft · SharePoint Server
Microsoft has fixed an out-of-bounds write in Windows Active Directory Domain Services (AD DS), the directory service on Windows Server and domain controllers. An authorized attacker with valid low-privilege domain credentials can execute code over the network, and the CVSS rating assumes total loss of confidentiality, integrity and availability. Exposure is mainly internal, because no internet access is required, but compromising a domain controller would give an attacker control of the whole domain.
Microsoft · Active Directory Domain Services
A integer overflow or wraparound flaw in Microsoft SharePoint Server Subscription Edition allows an attacker with valid credentials to execute code over the network. The CNA record and the research notes describe the attack as requiring authentication, and the required permission (list management) is reported differently by the sources. Exploitation is not known at the time of writing and the flaw is not listed in CISA KEV.
Microsoft · SharePoint Server
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A use-after-free flaw in the Windows Background Intelligent Transfer Service (BITS) allows code execution over the network. The Microsoft CNA record describes the attacker as unauthorized, but the CVSS vector supplied with the CVE data requires low privileges (PR:L), so the exact preconditions need verification. Microsoft has released a fix, and no exploitation in the wild or public proof of concept was found in the sources reviewed.
Microsoft · Windows Background Intelligent Transfer Service (BITS)
Research and translation in progress – available shortly.
A heap-based buffer overflow in OpenSSH for Windows, included in Windows 10, Windows 11 and Windows Server, allows an unauthorized attacker to execute code over the network. According to the CVSS vector, exploitation requires user interaction, for example a user connecting to a malicious SSH server. NVD rates the vulnerability 8.8 (high).
Microsoft · OpenSSH for Windows
A stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. The vulnerability is rated critical (CVSS 9.8). Per the research notes, a specially crafted email may trigger code execution through the Preview Pane without the recipient opening or clicking anything; no authentication is required.
Microsoft · Office Outlook
A heap-based buffer overflow (CWE-122) in Microsoft Office SharePoint Server allows an authorized attacker to execute code over the network. The CVSS vector requires a valid low-privilege account (PR:L) and no user interaction, so the risk depends on who can authenticate to the server. The vulnerability is confirmed for SharePoint Server Subscription Edition; the status of SharePoint Server 2016 and 2019 is not verified.
Microsoft · SharePoint Server
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A use-after-free flaw in the Windows Background Intelligent Transfer Service (BITS) allows an authorized local attacker to elevate privileges. The attacker needs a low-privileged account on the affected system and no user interaction. Successful exploitation could grant SYSTEM-level control of the host. Microsoft rates the CVSS score as 7.8 (High), and no exploitation or public exploit code is known.
Microsoft · Windows
Research and translation in progress – available shortly.
A flaw in Microsoft Office Word allows remote code execution through the use of an uninitialized resource (CWE-908). The CVSS base score is 8.8 and Microsoft rates it Important. An attacker can run code on a victim's computer by sending a malicious document that the user opens, for example by email or download, and no account is needed. The vulnerability is not exposed on internet-facing services and no public exploit or active exploitation is known.
Microsoft · Office Word
Research and translation in progress – available shortly.
A heap-based buffer overflow in the Windows Secure Socket Tunneling Protocol (SSTP) component lets an authorized local user elevate privileges to a higher level. The attack requires an existing low-privileged account or code already running on the machine, so it is not directly exploitable from the internet. Successful exploitation would give the attacker full control over confidentiality, integrity and availability of the affected system.
Microsoft · Windows
Research and translation in progress – available shortly.
A heap-based buffer overflow in Microsoft Office Excel allows an unauthenticated attacker to execute code over the network. The CVSS base score is 8.8 (HIGH). Exploitation requires that a user opens or otherwise processes a crafted Excel file; a secondary source indicates that the Preview Pane may be sufficient, which Microsoft's text has not confirmed. A successful attack would run with the rights of the user.
Microsoft · 365 Apps
Microsoft Office PowerPoint contains a use-after-free memory flaw (CWE-416) that allows an unauthenticated attacker to execute code on the affected system over the network. Exploitation requires a user to open or preview a crafted PowerPoint file, for example one received by email. Microsoft rates exploit code maturity as Unproven and no exploitation in the wild is known.
Microsoft · Office PowerPoint
A heap-based buffer overflow in the Windows Storage Spaces Controller allows an authorized local user with low privileges to elevate their privileges. Successful exploitation can give full control of the affected system. The attacker needs local access and an existing user account; the vulnerability is not reachable remotely from the internet. Microsoft rates exploit maturity as unproven.
Microsoft · Windows
The Windows Background Intelligent Transfer Service (BITS) contains a use-after-free weakness that allows code execution over the network. The CNA record describes an unauthorized attacker, while the CVSS vector requires low privileges; the CWE is still unresolved (CWE-122 in the request, CWE-416 use-after-free in the CNA description). Many Windows 10, Windows 11 and Windows Server branches are affected, including Windows 10 1607 and Windows Server 2016. No exploitation or public proof of concept is known.
Microsoft · Windows Background Intelligent Transfer Service (BITS)
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
