Kdot

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Visio (affected versions not specified) **Description** The issue is related to incorrect code generation management in Microsoft Office Visio, allowing a remote attacker to execute arbitrary code. This can be exploited by a remote attacker to gain control over the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Access (affected versions not specified) **Description** The issue is related to incorrect code generation management in a Microsoft Access component, which is part of Microsoft Office and Microsoft 365 Apps. This can be exploited by a remote attacker using a specially crafted request, allowing them to execute arbitrary code. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Word (affected versions not specified) **Description** The issue is related to incorrect code generation management in Microsoft Word, allowing a remote attacker to execute arbitrary code. This can be exploited by remote attackers, potentially leading to code execution. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) Microsoft 365 (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Online Server (affected versions not specified) Microsoft Office Web Apps (affected versions not specified) **Description** A vulnerability in Microsoft Excel is related to the use of memory after it has been freed. This issue can be exploited by a remote attacker to execute arbitrary code. The vulnerability is associated with the parsing of XLS files. **Recommendations** For Microsoft Excel, consider disabling the use of XLS file parsing until a patch is available. For Microsoft 365, restrict access to Microsoft Excel to minimize the risk of exploitation. For Microsoft Office, avoid using the affected versions of Microsoft Excel until the issue is resolved. For Microsoft Office Online Server, restrict access to Microsoft Excel Online to minimize the risk of exploitation. For Microsoft Office Web Apps, consider disabling the use of Microsoft Excel Web App until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office (affected versions not specified) **Description** The issue is related to a component of Microsoft Office Graphics, where an incompatibility in resource access types can be exploited. This can allow an attacker to execute arbitrary code in the context of the current user. The vulnerability can be exploited by remote attackers. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TeamViewer (affected versions not specified) Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The flaw exists within the parsing of TVS files due to the lack of proper validation of user-supplied data, resulting in a read past the end of an allocated structure. An attacker can leverage this to execute code in the context of the current process. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Word (affected versions not specified) **Description** The issue is related to a use-after-free condition in Microsoft Word, specifically with the handling of memory after it has been freed. This can be exploited by an attacker using a specially crafted malicious file, potentially allowing the execution of arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Graphics (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in the Microsoft Office Graphics component, which can be exploited by remote attackers to execute arbitrary code. This vulnerability is associated with the improper use of memory after it has been freed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) Microsoft 365 (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Online Server (affected versions not specified) Microsoft Office Web Apps Server (affected versions not specified) **Description** A vulnerability in Microsoft Excel is related to the use of memory after it has been freed. This issue can be exploited by a remote attacker to execute arbitrary code. The vulnerability is associated with the parsing of XLS files and can lead to a use-after-free remote code execution. **Recommendations** For Microsoft Excel, consider disabling the use of XLS file parsing until a patch is available. For Microsoft 365, restrict access to Microsoft Excel to minimize the risk of exploitation. For Microsoft Office, avoid using the affected versions of Microsoft Excel until the issue is resolved. For Microsoft Office Online Server and Microsoft Office Web Apps Server, restrict access to Microsoft Excel to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office (affected versions not specified) Microsoft 365 Apps for Enterprise (affected versions not specified) Microsoft Excel (affected versions not specified) Microsoft Office Web Apps Server (affected versions not specified) **Description** The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted file. This can occur through the parsing of Microsoft Excel XLS files. The vulnerability allows remote attackers to execute arbitrary code. **Recommendations** For Microsoft Office, consider restricting the use of Microsoft Excel XLS file parsing until a patch is available. For Microsoft 365 Apps for Enterprise, avoid using potentially malicious files from untrusted sources to minimize the risk of exploitation. For Microsoft Excel, as a temporary workaround, consider disabling the parsing of XLS files until a patch is available. For Microsoft Office Web Apps Server, restrict access to the server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Word (affected versions not specified) **Description** The issue is related to errors in code generation management in Microsoft Word, allowing remote attackers to execute arbitrary code. This can be exploited to gain unauthorized access and execute malicious code. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. Technical details about exploitation include the ability to execute arbitrary code, but specific API endpoints, vulnerable parameters, or function names are not mentioned. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) **Description** The issue is related to incorrect code generation management in Microsoft Excel. It allows a remote attacker to execute arbitrary code. The vulnerability can be exploited through the parsing of XLS files, leading to a use-after-free remote code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: The issue is related to incorrect code generation management in Microsoft Excel. It allows a remote attacker to execute arbitrary code. The vulnerability can be exploited through the parsing of XLS files, leading to a use-after-free condition. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office (affected versions not specified) **Description** The issue is related to incorrect code generation management during the syntactic analysis of XLS files in Microsoft Office and Microsoft Office Web Apps. This can be exploited by an attacker to execute arbitrary code using a specially crafted malicious file or a specially formed malicious web page. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Online Server (affected versions not specified) Microsoft Office Web Apps Server (affected versions not specified) Microsoft 365 Apps (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary code. This can be exploited by remote attackers. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Web Apps (affected versions not specified) Microsoft 365 Apps for Enterprise (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in Microsoft Excel, allowing remote attackers to execute arbitrary code, access protected information, or cause a denial of service. This can be exploited through the parsing of XLS files. **Recommendations** For Microsoft Excel, consider disabling the XLS file parsing functionality until a patch is available. For Microsoft Office, restrict access to potentially vulnerable components to minimize the risk of exploitation. For Microsoft Office Web Apps, avoid using the service for handling sensitive documents until the issue is resolved. For Microsoft 365 Apps for Enterprise, apply configuration changes to limit the impact of the vulnerability, such as restricting file types that can be opened in Microsoft Excel. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user. If the current user has administrative user rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could occur through email or web-based attacks, where an attacker convinces a user to open the specially crafted file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software due to its failure to properly handle objects in memory. This could allow an attacker to run arbitrary code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change, or delete data, or create new accounts with full user rights. The exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could be achieved through email or web-based attacks, where an attacker convinces the user to open the malicious file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. This could allow an attacker to run arbitrary code in the context of the current user. If the user has administrative rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This can occur through email or web-based attacks where the user is convinced to open the malicious file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user. If the current user has administrative user rights, an attacker could take control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Excel. This could be achieved through email or web-based attacks, where an attacker convinces a user to open the specially crafted file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.