Kaspersky ID:
KLA20157
Detect Date:
01/10/2023
Updated:
01/25/2024

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
  2. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.
  3. A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
  4. A security feature bypass vulnerability in Microsoft SharePoint Server can be exploited remotely to bypass security restrictions.
  5. An information disclosure vulnerability in Microsoft Office Visio can be exploited remotely to obtain sensitive information.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

CVE list

  • CVE-2023-21737
    critical
  • CVE-2023-21742
    critical
  • CVE-2023-21744
    critical
  • CVE-2023-21734
    critical
  • CVE-2023-21738
    critical
  • CVE-2023-21735
    critical
  • CVE-2023-21743
    high
  • CVE-2023-21741
    high
  • CVE-2023-21736
    critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.