microsoft office 2013 click-to-run - vulnerabilities and exploits

(subscribe to this query)

7

CVSSv3

<p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this vulnerability, an attack...

Microsoft Office 2019 Microsoft 365 Apps -Microsoft Office 2013 Click-to-run -

3.3

CVSSv3

The Click-to-Run (C2R) implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass."

Microsoft Office 2016 Microsoft Office 2013

3.3

CVSSv3

Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability, due to how Office initializes the affected variable, aka "Microsoft Office Information Disclosu...

Microsoft Office 2016 Microsoft Office 2010 Microsoft Office 2013

1 Article

7.8

CVSSv3

<p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this vulnerability, an attack...

Microsoft Office 2019 Microsoft 365 Apps -Microsoft Office 2013

7.8

CVSSv3

<p>An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges.</p> <p>To exploit this vulnerability, an attack...

Microsoft Office 2019 Microsoft 365 Apps -Microsoft Office 2013

7.8

CVSSv3

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execut...

Microsoft Office 2019 Microsoft 365 Apps -Microsoft Office 2013

7.8

CVSSv3

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft Office Word Viewer, Microsoft SharePoint Ent...

Microsoft Word 2013 Microsoft Word 2010 Microsoft Word 2007 Microsoft Sharepoint Server 2010 Microsoft Office Word Viewer -Microsoft Office Web Apps 2013 Microsoft Office Web Apps 2010 Microsoft Office Compatibility Pack -Microsoft Sharepoint Enterprise Server 2013 Microsoft Office 2016 Microsoft Office 2013 Microsoft Word 2016 Microsoft Office Online Server 2016 Microsoft Sharepoint Enterprise Server 2016 Microsoft Office 2010

1 Article

3.3

CVSSv3

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, M...

Microsoft Word 2013 Microsoft Word 2010 Microsoft Sharepoint Server 2010 Microsoft Sharepoint Enterprise Server 2013 Microsoft Office Web Apps 2010 Microsoft Office Online Server 2016 Microsoft Office 2016 Microsoft Office 2010 Microsoft Word 2016 Microsoft Sharepoint Enterprise Server 2016 Microsoft Office Web Apps Server 2013

1 Article

8.8

CVSSv3

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, ...

Microsoft Outlook 2013 Microsoft Outlook 2016 Microsoft Outlook 2010 Microsoft Office 2007 Microsoft Office 2016 Microsoft Office Word Viewer -

1 Article

7.8

CVSSv3

Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Access Remote Code Execution Vulnerability".

Microsoft Office 2016 Microsoft Access 2010 Microsoft Access 2013 Microsoft Access 2016

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook