Non notée
CVE-2020-1581 An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle…
Description
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the system. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The security update addresses the vulnerability by correcting how Microsoft Office Click-to-Run (C2R) components handle objects in memory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Office 2013 Click-to-Run (C2R) 15.0 | 15.0.0.0 → < 15.0.5571.1000 | 15.0.5571.1000 |
| Microsoft Office 2019 19.0 | 19.0.0 → dernières | Pas de correctif indiqué |
| Microsoft 365 Apps for Enterprise 16.0 | 16.0.1 → dernières | Pas de correctif indiqué |
Références
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Office 2013 Click-to-Run (C2R)
Les 6 CVE de Microsoft Office 2013 Click-to-Run (C2R) →
CVE-2023-33148
Microsoft Office Elevation of Privilege Vulnerability
7.8
Élevée
CVE-2022-22004
Microsoft Office ClickToRun Remote Code Execution Vulnerability
7.8
Élevée
CVE-2020-16955
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles…
7.8
Élevée
CVE-2020-16934
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles…
7.0
Élevée