Microsoft Word Remote Code Execution Vulnerability
Visual Studio Tools for Office Runtime Spoofing Vulnerability
Microsoft is investigating reports of a series of remote code execution vulnerabilities impacting Windows and Office products. Microsoft is aware of targeted attacks that attempt to exploit these vulnerabilities by using specially-crafted Microsoft Office documents.
An attacker could create a specially crafted Microsoft Office document that enables them to perform remote code execution in the context of the victim. However, an attacker would have to convince the victim to open the malicious file.
Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This might include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs.
Please see the Microsoft Threat Intelligence Blog https://aka.ms/Storm-0978 Entry for important information about steps you can take to protect your system from this vulnerability.
This CVE will be updated with new information and links to security updates when they become available.
Microsoft Excel Security Feature Bypass Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Excel Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Remote Code Execution Vulnerability
Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
Microsoft ActiveX Remote Code Execution Vulnerability
Microsoft Office Elevation of Privilege Vulnerability
Microsoft Outlook Spoofing Vulnerability
Microsoft Office Security Feature Bypass Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.
Microsoft Word Security Feature Bypass Vulnerability
Microsoft Access Denial of Service Vulnerability
Microsoft Excel Spoofing Vulnerability
Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability
Microsoft Excel Remote Code Execution Vulnerability.
Microsoft Office Trust Center Spoofing Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Word Security Feature Bypass Vulnerability