Jinquan

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) Microsoft Office Web Apps Server (affected versions not specified) **Description** The issue is related to insufficient input validation in Microsoft Excel and Microsoft Office Web Apps Server, which can be exploited to execute arbitrary code. This allows remote attackers to execute code remotely. **Recommendations** For Microsoft Excel, consider restricting the use of potentially vulnerable functions until a patch is available. For Microsoft Office Web Apps Server, restrict access to vulnerable modules to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions prior to the fixed version windows10 windows 11 win srv 19 win srv 22 **Description** The issue is related to incorrect code generation management in the Windows Runtime component of the Windows operating system. This allows a remote attacker to execute arbitrary code. There is a proof of concept exploit available. **Recommendations** For Microsoft Windows versions prior to the fixed version, apply the necessary patch to resolve the issue. For windows10, update to a version that includes the fix for this issue. For windows 11, apply the relevant security update. For win srv 19 and win srv 22, install the available patch to mitigate the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Windows Modern Execution Server (affected versions not specified) **Description** The issue is related to errors in code generation management in the Modern Execution Server component of Windows operating systems. It allows remote attackers to execute arbitrary code by sending a specially crafted request. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Security Center API (affected versions not specified) **Description** The issue is related to incorrect code generation management in the Windows Security Center API component of the Windows operating system. This allows remote attackers to execute arbitrary code, affecting the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Graphics (affected versions not specified) **Description** The issue is related to incorrect code generation management in the Microsoft Office Graphics component used by Microsoft Excel. This can allow an attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) Microsoft Office (affected versions not specified) **Description** The issue is related to incorrect code generation handling in Microsoft Excel. It allows remote attackers to execute arbitrary code, potentially affecting the system. **Recommendations** For Microsoft Excel, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microsoft Office, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft DWM Core Library (affected versions not specified) **Description** The issue is related to errors in privilege management within the Microsoft DWM Core Library of the Windows operating system. Exploitation of this issue may allow an attacker to escalate their privileges. It is an elevation-of-privilege vulnerability that allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows (affected versions not specified) Windows 10 versions prior to February 2021 **Description** A memory buffer overflow and type confusion issue exists in the Win32k component of the Windows kernel. During the execution of the `NtUserCreateWindowEx()` function, an attacker can abuse a user-mode callback to confuse the `win32k.sys` driver regarding the `cbWndExtra` and `pExtraBytes` fields. This allows the `SetWindowLongPtr()` function to be used as an arbitrary kernel read/write primitive, enabling an attacker to overwrite the current process token with the SYSTEM token to gain full privileges. This issue has been actively exploited in the wild by the APT Bitter group and integrated into the Disco malware framework to facilitate privilege escalation. It was also observed in attacks targeting medical institutions to deploy cryptocurrency miners. **Recommendations** Update Windows 10 to the February 2021 security update or a newer version. At the moment, there is no information about a newer version that contains a fix for this vulnerability for other unspecified Windows versions.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Microsoft 365 Apps (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Online Server (affected versions not specified) Microsoft Office Web Apps (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified) Description: The issue is related to insufficient input validation in Microsoft Excel, allowing a remote attacker to execute arbitrary code. This can be exploited by attackers to gain unauthorized access and execute malicious code. Recommendations: For Microsoft Excel, consider disabling any features that rely on external input until a patch is available. For Microsoft 365 Apps, restrict access to any modules or functions that may be vulnerable to input validation attacks. For Microsoft Office, Microsoft Office Online Server, Microsoft Office Web Apps, and Microsoft SharePoint Enterprise Server, apply configuration changes to minimize the risk of exploitation, such as limiting user permissions and restricting access to sensitive data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Web Apps (affected versions not specified) Microsoft Office Online Server (affected versions not specified) Microsoft 365 Apps for Enterprise (affected versions not specified) **Description** The issue is related to a buffer overflow read, which may allow an attacker to access protected information. There is an information disclosure vulnerability in Microsoft Excel that enables attackers to obtain sensitive information. **Recommendations** For Microsoft Excel, consider restricting access to sensitive information until a patch is available. For Microsoft Office, avoid using vulnerable components until a fix is provided. For Microsoft Office Web Apps, restrict access to minimize the risk of exploitation. For Microsoft Office Online Server, consider disabling vulnerable functions until a patch is available. For Microsoft 365 Apps for Enterprise, restrict access to sensitive information until a fix is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: The issue is related to errors in code generation management in Microsoft Excel. It allows remote attackers to execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could occur through email or web-based attack scenarios where an attacker convinces a user to open the specially crafted file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: An information disclosure issue exists due to Microsoft Excel's improper handling of its memory contents. This could allow an attacker to compromise a user's computer or data by exploiting the vulnerability. To exploit this issue, an attacker would need to craft a special document file and convince a user to open it, requiring knowledge of the memory address location where the object was created. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could occur through email or web-based attacks, where an attacker convinces a user to open the specially crafted file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software due to its failure to properly handle objects in memory. This could allow an attacker to run arbitrary code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could be achieved through email or web-based attacks, where an attacker convinces a user to open the specially crafted file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could be achieved through email or web-based attacks, where an attacker convinces a user to open the specially crafted file. The security update addresses the issue by correcting how Microsoft Excel handles objects in memory. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) **Description** An information disclosure issue exists due to Microsoft Excel improperly disclosing the contents of its memory. This could allow a remote attacker to access protected information by using a specially crafted file. The exploitation of this issue may enable the attacker to compromise the user's computer or data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Word (affected versions not specified) Microsoft SharePoint Server (affected versions not specified) Microsoft Office (affected versions not specified) **Description** A remote code execution issue exists due to improper handling of objects in memory. This could allow a remote attacker to execute arbitrary code with the privileges of the current user by using a specially crafted file. To exploit this issue, a user must open a specially crafted file with an affected version of the software. **Recommendations** For Microsoft Word, consider avoiding the use of specially crafted files until a fix is available. For Microsoft SharePoint Server, restrict access to files that could potentially exploit this issue until a patch is applied. For Microsoft Office, as a temporary workaround, consider disabling the ability to open specially crafted files until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft PowerPoint (affected versions not specified) **Description** A remote code execution issue exists in Microsoft PowerPoint software due to improper handling of objects in memory. This could allow an attacker to execute arbitrary code by using a specially crafted file. If the current user has administrative rights, an attacker could gain control of the system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights may be less impacted. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) **Description** A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. This could allow an attacker to execute arbitrary code using a specially crafted file. If successfully exploited, an attacker could run code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights may be less impacted than those with administrative rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.