cyber.hendryadrian.com
Vulnerability & Exploit · securityweek.com

Microsoft Patches More Than 30 Vulnerabilities, Including Two Dozen Office RCE Flaws

· Original article ↗

Summary

Microsoft patched more than 30 vulnerabilities, including two dozen high-severity Office RCE flaws; some could be triggered through the Preview Pane. Microsoft said none were exploited as zero-days.

Key points

  • Two dozen high-severity remote code execution flaws in Office were patched; six could be targeted through the Preview Pane.
  • Most RCE attacks require a specially crafted file and the recipient to open it.
  • Microsoft attributed most RCE flaws to buffer overflows; others included off-by-one, use-after-free, path traversal, and numeric truncation errors.
  • Word received most of the Office fixes, with additional patches for Excel, Outlook, PowerPoint, and SharePoint.
  • Microsoft also fixed Office information disclosure and security bypass flaws, plus vulnerabilities in ASP.NET Core, Identity Web, and MSAL for Node.js.
  • Microsoft said none of the newly fixed issues had been exploited in the wild as zero-days.

Article Details

Vulnerability Types
  • Remote code execution
  • Information disclosure
  • Security bypass
  • Denial of service
  • Elevation of privilege
  • Buffer overflow
  • Off-by-one error
  • Use-after-free
  • Path traversal
  • Numeric truncation
Severity
High for the Office remote code execution flaws
Exploitation Status
not_reported
Exploit Availability
unknown
Patch Status
available

MITRE ATT&CK

T1203 · Exploitation for Client ExecutionThe reported Office remote code execution flaws can be targeted by opening a specially crafted file.T1204.002 · Malicious FileIn most cases, an attacker must send a specially crafted file and convince the recipient to open it.

Vendors

MicrosoftHot on the heels of its record Patch Tuesday rollout, Microsoft on Thursday announced patches for over 30 new vulnerabilities.

Products

ASP.NET CoreAdditionally, it resolved a denial-of-service (DoS) defect in ASP.NET Core, an elevation of privilege in Identity Web, and an information disclosure in Authentication Library (MSAL) for Node.js.ExcelWord received the majority of patches, with only a few rolled out for Excel, Outlook, PowerPoint, and SharePoint.Identity WebAdditionally, it resolved a denial-of-service (DoS) defect in ASP.NET Core, an elevation of privilege in Identity Web, and an information disclosure in Authentication Library (MSAL) for Node.js.Microsoft Authentication Library (MSAL)Additionally, it resolved a denial-of-service (DoS) defect in ASP.NET Core, an elevation of privilege in Identity Web, and an information disclosure in Authentication Library (MSAL) for Node.js.Microsoft PowerPointWord received the majority of patches, with only a few rolled out for Excel, Outlook, PowerPoint, and SharePoint.Microsoft SharePointWord received the majority of patches, with only a few rolled out for Excel, Outlook, PowerPoint, and SharePoint.OfficeMost of the new fixes address security defects in the Office suite.OutlookWord received the majority of patches, with only a few rolled out for Excel, Outlook, PowerPoint, and SharePoint.WordWord received the majority of patches, with only a few rolled out for Excel, Outlook, PowerPoint, and SharePoint.

Related Articles