Description
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information.
Below is a complete list of vulnerabilities:
- A remote code execution vulnerability in Microsoft Office Visio can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary code.
- A remote code execution vulnerability in Microsoft Office can be exploited remotely to execute arbitrary code.
- A security feature bypass vulnerability in Microsoft SharePoint Server can be exploited remotely to bypass security restrictions.
- An information disclosure vulnerability in Microsoft Office Visio can be exploited remotely to obtain sensitive information.
Original advisories
- CVE-2023-21742
- CVE-2023-21744
- CVE-2023-21734
- CVE-2023-21738
- CVE-2023-21735
- CVE-2023-21743
- CVE-2023-21741
- CVE-2023-21736
Exploitation
Public exploits exist for this vulnerability.
Related products
CVE list
- CVE-2023-21737 critical
- CVE-2023-21742 critical
- CVE-2023-21744 critical
- CVE-2023-21734 critical
- CVE-2023-21738 critical
- CVE-2023-21735 critical
- CVE-2023-21743 high
- CVE-2023-21741 high
- CVE-2023-21736 critical
KB list
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!