ZDI-26-607: Microsoft Office HTML Injection Information Disclosure Vulnerability

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-24 05:00 UTC
  • Importiert: 2026-10-21 17:34 UTC
  • Quelle-ID: zdi_pub
  • uid_hash: 33e124889e74ff91e6007883de820e5cf1ebd7bfd4f9a7d64d79d174ca3d3d39

Inhalt

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.6.

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Zero Day Initiative (Published)

zdi_pub

threat_intel - de https://www.zerodayinitiative.com/rss/published/