Microsoft Office Visio是美国微软(Microsoft)公司的Office软件系列中的负责绘制流程图和示意图的软件。 Microsoft Office Visio存在资源管理错误漏洞。攻击者利用该漏洞可以远程执行代码。以下产品和版本受到影响:Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit editions,Microsoft 365 Apps for Enterprise for 32
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1< https://aka.ms/OfficeSecurityReleases |
affected |
| Microsoft | Microsoft Office 2019 | 19.0.0< https://aka.ms/OfficeSecurityReleases |
affected |
| Microsoft | Microsoft Office LTSC 2021 | 16.0.1< https://aka.ms/OfficeSecurityReleases |
affected |
| Microsoft | Microsoft Visio 2016 | 16.0.1< 16.0.5465.1001 |
affected |
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1 ~ https://aka.ms/OfficeSecurityReleases | - |
|
| Microsoft | Microsoft Office 2019 | 19.0.0 ~ https://aka.ms/OfficeSecurityReleases | - |
|
| Microsoft | Microsoft Office LTSC 2021 | 16.0.1 ~ https://aka.ms/OfficeSecurityReleases | - |
|
| Microsoft | Microsoft Visio 2016 | 16.0.1 ~ 16.0.5465.1001 | - |
|
| # | POC Description | Source Link | Shenlong Link |
|---|
No public POC found.
Login to generate AI POC| CVE-2024-43491 | 9.8 CRITICAL | Microsoft Windows Update Remote Code Execution Vulnerability |
| CVE-2024-38220 | 9.0 CRITICAL | Azure Stack Hub Elevation of Privilege Vulnerability |
| CVE-2024-38260 | 8.8 HIGH | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
| CVE-2024-26191 | 8.8 HIGH | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
| CVE-2024-38018 | 8.8 HIGH | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2024-37340 | 8.8 HIGH | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
| CVE-2024-37980 | 8.8 HIGH | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2024-37335 | 8.8 HIGH | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
| CVE-2024-37339 | 8.8 HIGH | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
| CVE-2024-26186 | 8.8 HIGH | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
| CVE-2024-37341 | 8.8 HIGH | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2024-37965 | 8.8 HIGH | Microsoft SQL Server Elevation of Privilege Vulnerability |
| CVE-2024-38225 | 8.8 HIGH | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
| CVE-2024-43469 | 8.8 HIGH | Azure CycleCloud Remote Code Execution Vulnerability |
| CVE-2024-43461 | 8.8 HIGH | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-43455 | 8.8 HIGH | Windows Remote Desktop Licensing Service Spoofing Vulnerability |
| CVE-2024-38259 | 8.8 HIGH | Microsoft Management Console Remote Code Execution Vulnerability |
| CVE-2024-37338 | 8.8 HIGH | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
| CVE-2024-43479 | 8.5 HIGH | Microsoft Power Automate Desktop Remote Code Execution Vulnerability |
| CVE-2024-38194 | 8.4 HIGH | Azure Web Apps Elevation of Privilege Vulnerability |
Showing top 20 of 79 CVEs. View all on vendor page → →
No comments yet