Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| microsoft | 365 apps | 16.0.1 – < 16.0.20326.20138 | |
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1 – < 16.0.20326.20138 | |
| Microsoft | Microsoft Office 2019 | 19.0.0 – < 16.0.10417.20207 | |
| Microsoft | Microsoft Office LTSC 2021 | 16.0.1 – < 16.0.14334.20906 | |
| Microsoft | Microsoft Office LTSC 2024 | 16.0.0 – < 16.0.17932.20976 | |
| Microsoft | Microsoft Outlook 2016 | 16.0.0.0 – < 16.0.5569.1000 | |
| microsoft | office 2019 | 19.0.0 – < 16.0.10417.20207 | |
| microsoft | office 2021 | 16.0.1 – < 16.0.14334.20906 | |
| microsoft | office 2024 | 16.0.0 – < 16.0.17932.20976 | |
| microsoft | outlook | 2016 | |
| microsoft | outlook 2016 | 16.0.0.0 – < 16.0.5569.1000 |
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x64:*cpe:2.3:a:microsoft:office_2019:-:*:*:*:*:*:x86:*cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x64:*cpe:2.3:a:microsoft:office_2021:-:*:*:*:ltsc:-:x86:*cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x64:*cpe:2.3:a:microsoft:office_2024:-:*:*:*:ltsc:-:x86:*cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:x64:*cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:x86:*Nuestro sensor honeypot gratuito y de código abierto espera en puertos que su servidor no usa y reporta a una lista compartida los escáneres y atacantes que se conectan.