Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.832225
Categoría:Windows : Microsoft Bulletins
Título:Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jul 2023)
Resumen:This host is missing a critical security; update according to Microsoft Office Click-to-Run update July 2023
Descripción:Summary:
This host is missing a critical security
update according to Microsoft Office Click-to-Run update July 2023

Vulnerability Insight:
Multiple flaws exist due to,

- Microsoft Excel Information Disclosure and Remote Code Execution Vulnerabilities.

- Microsoft Outlook Security Feature Bypass, Spoofing and Remote Code Execution
Vulnerabilities.

- Microsoft Office Elevation of Privilege Vulnerability.

- Microsoft ActiveX Remote Code Execution Vulnerability.

- Microsoft Office Graphics Remote Code Execution Vulnerability.

Vulnerability Impact:
Successful exploitation would allow an attacker
to conduct remote code execution, spoofing, disclose sensitive information,
elevate privileges and bypass security restrictions on an affected system.

Affected Software/OS:
Microsoft Office 365 (2016 Click-to-Run).

Solution:
The vendor has released updates. Please see
the references for more information.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2023-33161
Microsoft Excel Remote Code Execution Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33161
Common Vulnerability Exposure (CVE) ID: CVE-2023-33162
Microsoft Excel Information Disclosure Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33162
Common Vulnerability Exposure (CVE) ID: CVE-2023-33158
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33158
Common Vulnerability Exposure (CVE) ID: CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35311
Common Vulnerability Exposure (CVE) ID: CVE-2023-33151
Microsoft Outlook Spoofing Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33151
Common Vulnerability Exposure (CVE) ID: CVE-2023-33148
Microsoft Office Elevation of Privilege Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33148
http://packetstormsecurity.com/files/173591/Microsoft-Office-365-18.2305.1222.0-Remote-Code-Execution.html
Common Vulnerability Exposure (CVE) ID: CVE-2023-33149
Microsoft Office Graphics Remote Code Execution Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33149
Common Vulnerability Exposure (CVE) ID: CVE-2023-33150
Microsoft Office Security Feature Bypass Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33150
Common Vulnerability Exposure (CVE) ID: CVE-2023-33152
Microsoft ActiveX Remote Code Execution Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33152
Common Vulnerability Exposure (CVE) ID: CVE-2023-33153
Microsoft Outlook Remote Code Execution Vulnerability
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33153
CopyrightCopyright (C) 2023 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.