New vulnerabilities – clearly explained

Microsoft Windows 10 21h2

Research and translation in progress – available shortly.

Microsoft Windows 11 23h2

Research and translation in progress – available shortly.

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 11 23h2

Research and translation in progress – available shortly.

Microsoft Windows 11 24h2

Research and translation in progress – available shortly.

Microsoft Windows Server 2022

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 11 23h2

Research and translation in progress – available shortly.

Microsoft Sharepoint Server

Research and translation in progress – available shortly.

Microsoft Sharepoint Server

Research and translation in progress – available shortly.

Microsoft Office OneNote: Remote code execution via command injection

A command injection flaw (CWE-77) in Microsoft Office OneNote, part of Microsoft 365 Apps for Enterprise, allows an unauthenticated remote attacker to execute code. The attack requires that a user opens a specially crafted OneNote link sent by the attacker. The CVSS base score is 8.8 (High), with high impact on confidentiality, integrity and availability.

Microsoft · 365 Apps

Microsoft Office Excel: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Office Excel allows an unauthenticated attacker to execute code over a network (CVSS 8.8, CWE-122). User interaction is required, so the attacker needs a victim to open a crafted file, for example an email attachment or a downloaded spreadsheet. Successful exploitation would give the attacker high impact on confidentiality, integrity and availability on the affected computer.

Microsoft · Office Excel

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft Office Excel: Remote code execution via integer overflow

An integer overflow (CWE-190) in Microsoft Office Excel allows an unauthenticated attacker to execute code over the network. The attack requires that a user opens a crafted Excel file, most likely delivered by email or download. A successful attack runs code in the context of the user, and the CVSS 3.1 base score is 8.8 (High). Office Online Server is server-side, so on-premises instances need separate attention.

Microsoft · Office Excel

Microsoft Office Excel: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Office Excel allows an unauthenticated attacker to execute code over a network. The attacker needs a user to take an action, such as opening a manipulated spreadsheet. Microsoft rates the CVSS 3.1 base score at 8.8 (High).

Microsoft · Office Excel

Microsoft Office Excel: Heap-based buffer overflow allows remote code execution

A heap-based buffer overflow in Microsoft Office Excel, part of Microsoft 365 Apps, Office LTSC, Office for Mac and Office Online Server, allows an unauthenticated remote attacker to execute code. The attacker needs a victim to open or otherwise engage with a crafted file or content, for example via a phishing email with an Excel attachment or link. The code runs with the privileges of the Excel user; CVSS 3.1 base score is 8.8 (High). Microsoft's CISA SSVC assessment lists exploitation as none and automatable as no.

Microsoft · Office Excel

Office Excel: Remote code execution via use-after-free

Microsoft Office Excel contains a use-after-free memory corruption flaw (CWE-416) that allows an unauthorized attacker to execute code over the network. The CVSS 3.1 base score is 8.8 (HIGH). Exploitation requires user interaction, most likely opening a crafted Excel file received by email or download. CISA SSVC data rates exploitation as none and automation as not possible, and no public proof of concept was found in the research.

Microsoft · Office Excel

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft Office Excel: Remote code execution via heap-based buffer overflow

Microsoft Office Excel contains a heap-based buffer overflow (CWE-122) that allows an unauthenticated attacker to execute code over a network. Exploitation requires that a user opens a crafted spreadsheet, for example one received by email or downloaded from the internet. The vulnerability is rated CVSS 8.8 (High). No exploitation in the wild is known.

Microsoft · Office Excel

Microsoft Excel: Remote code execution due to double free

A double free vulnerability (CWE-415) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Exploitation requires user interaction, for example opening a manipulated spreadsheet received by email or download. Microsoft rates the flaw as Important with a CVSS 3.1 base score of 8.8.

Microsoft · 365 Apps

Microsoft 365 Apps: Use-after-free in Excel allows remote code execution

A use-after-free vulnerability in Microsoft Excel, part of Microsoft 365 Apps and Office, allows an unauthorized attacker to execute code over a network. The attacker needs a victim to open or interact with a crafted file, typically received by email or download. Microsoft rates the flaw as Important (CVSS 8.8); no active exploitation or public exploit code is known.

Microsoft · 365 Apps

Microsoft Office Excel: Stack-based buffer overflow allows remote code execution

Microsoft Excel, part of Microsoft 365 Apps and Office, contains a stack-based buffer overflow (CWE-121). An attacker can execute code on a vulnerable system over the network without authentication. According to a third-party source, the flaw is triggered when a user opens a malicious spreadsheet, so phishing with attachments is the main risk.

Microsoft · Office Excel

Microsoft Office Excel: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Office Excel allows a remote attacker to execute code. The attacker needs no privileges, but a user must open a crafted file or link. Code execution on the user's workstation is the main risk, and the CVSS base score is 8.8 (High). Microsoft has released fixes; no exploitation in the wild is known.

Microsoft · Office Excel

Microsoft Office Excel: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. The attack requires a user to open a manipulated file, for example an email attachment or a download. Successful exploitation would give the attacker full control over confidentiality, integrity and availability on the affected computer.

Microsoft · Office Excel

Microsoft Office Excel: Remote code execution through double free

A double free and a NULL pointer dereference in Microsoft Office Excel allow remote code execution. An unauthenticated attacker can run code in the context of the user by sending a specially crafted Excel file, for example as an email attachment or download. Exploitation requires that the user opens the file, and Microsoft's CVSS rating is 8.8 (High). Microsoft 365 Apps, standalone Office releases and Office Online Server are affected.

Microsoft · 365 Apps