Jinquan

The issue is related to insufficient input validation in Microsoft Excel and Microsoft Office Web Apps Server, which can be exploited to execute arbitrary code. This allows remote attackers to execute code remotely.

The issue is related to incorrect code generation management in the Windows Runtime component of the Windows operating system. This allows a remote attacker to execute arbitrary code. There is a proof of concept exploit available.

The issue is related to errors in code generation management in the Modern Execution Server component of Windows operating systems. It allows remote attackers to execute arbitrary code by sending a specially crafted request. This can affect the system.

The issue is related to incorrect code generation management in the Windows Security Center API component of the Windows operating system. This allows remote attackers to execute arbitrary code, affecting the system.

The issue is related to incorrect code generation management in the Microsoft Office Graphics component used by Microsoft Excel. This can allow an attacker to execute arbitrary code.

The issue is related to incorrect code generation handling in Microsoft Excel. It allows remote attackers to execute arbitrary code, potentially affecting the system.

The issue is related to errors in privilege management within the Microsoft DWM Core Library of the Windows operating system. Exploitation of this issue may allow an attacker to escalate their privileges. It is an elevation-of-privilege vulnerability that allows attackers to affect the system.

A memory buffer overflow and type confusion issue exists in the Win32k component of the Windows kernel. During the execution of the `NtUserCreateWindowEx()` function, an attacker can abuse a user-mode callback to confuse the `win32k.sys` driver regarding the `cbWndExtra` and `pExtraBytes` fields. This allows the `SetWindowLongPtr()` function to be used as an arbitrary kernel read/write primitive, enabling an attacker to overwrite the current process token with the SYSTEM token to gain full privileges. This issue has been actively exploited in the wild by the APT Bitter group and integrated into the Disco malware framework to facilitate privilege escalation. It was also observed in attacks targeting medical institutions to deploy cryptocurrency miners.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Microsoft 365 Apps (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Online Server (affected versions not specified) Microsoft Office Web Apps (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified) Description: The issue is related to insufficient input validation in Microsoft Excel, allowing a remote attacker to execute arbitrary code. This can be exploited by attackers to gain unauthorized access and execute malicious code. Recommendations: For Microsoft Excel, consider disabling any features that rely on external input until a patch is available. For Microsoft 365 Apps, restrict access to any modules or functions that may be vulnerable to input validation attacks. For Microsoft Office, Microsoft Office Online Server, Microsoft Office Web Apps, and Microsoft SharePoint Enterprise Server, apply configuration changes to minimize the risk of exploitation, such as limiting user permissions and restricting access to sensitive data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a buffer overflow read, which may allow an attacker to access protected information. There is an information disclosure vulnerability in Microsoft Excel that enables attackers to obtain sensitive information.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: The issue is related to errors in code generation management in Microsoft Excel. It allows remote attackers to execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could occur through email or web-based attack scenarios where an attacker convinces a user to open the specially crafted file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: An information disclosure issue exists due to Microsoft Excel's improper handling of its memory contents. This could allow an attacker to compromise a user's computer or data by exploiting the vulnerability. To exploit this issue, an attacker would need to craft a special document file and convince a user to open it, requiring knowledge of the memory address location where the object was created. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could occur through email or web-based attacks, where an attacker convinces a user to open the specially crafted file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software due to its failure to properly handle objects in memory. This could allow an attacker to run arbitrary code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could be achieved through email or web-based attacks, where an attacker convinces a user to open the specially crafted file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could be achieved through email or web-based attacks, where an attacker convinces a user to open the specially crafted file. The security update addresses the issue by correcting how Microsoft Excel handles objects in memory. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

An information disclosure issue exists due to Microsoft Excel improperly disclosing the contents of its memory. This could allow a remote attacker to access protected information by using a specially crafted file. The exploitation of this issue may enable the attacker to compromise the user's computer or data.

A remote code execution issue exists due to improper handling of objects in memory. This could allow a remote attacker to execute arbitrary code with the privileges of the current user by using a specially crafted file. To exploit this issue, a user must open a specially crafted file with an affected version of the software.

A remote code execution issue exists in Microsoft PowerPoint software due to improper handling of objects in memory. This could allow an attacker to execute arbitrary code by using a specially crafted file. If the current user has administrative rights, an attacker could gain control of the system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights may be less impacted.

A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. This could allow an attacker to execute arbitrary code using a specially crafted file. If successfully exploited, an attacker could run code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights may be less impacted than those with administrative rights.