Quote:Microsoft released the July 2019 Office Updates today that bundle 20 security updates and 5 cumulative updates. Seeing that some of the Microsoft Office security updates issued today also resolve critical vulnerabilities, it is strongly advised to install them as soon as possible.
Out of the 20 Office security updates released by Microsoft today, six of them fix remote code execution vulnerabilities (CVE-2019-1110 and CVE-2019-1111) within Office 2016, Office 2013, Office 2010, Excel 2016, Excel 2013, and Excel 2010.
These patched remote code execution security flaws are rated as Critical by Microsoft since they could allow attackers to execute arbitrary code and commands after exploiting vulnerable computers.
Six of the security patches issued today also fix information disclosure flaws (CVE-2019-1084 and CVE-2019-1109) impacting Office 2016, Outlook 2016, Skype for Business 2016, Office 2013, Office 2013, Outlook 2013, Skype for Business 2015 (Lync 2013), and Outlook 2010.
Four other security updates are designed to patch authentication bypass vulnerabilities (CVE-2019-1006 and CVE-2019-1134) affecting SharePoint Server 2019, SharePoint Enterprise Server 2016, SharePoint Enterprise Server 2013, SharePoint Foundation 2013, and SharePoint Foundation 2010.
SOURCE: https://www.bleepingcomputer.com/news/mi...ity-fixes/