KLA48560
Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Microsoft Excel can be exploited remotely to spoof user interface.
2. A spoofing vulnerability in Office for Android can be exploited remotely to spoof user interface.
3. An information disclosure vulnerability in Microsoft OneDrive for Android can be exploited remotely to obtain sensitive information.
4. An elevation of privilege vulnerability in Microsoft Outlook can be exploited remotely to gain privileges.
5. An elevation of privilege vulnerability in Microsoft OneDrive for MacOS can be exploited remotely to gain privileges.
6. An elevation of privilege vulnerability in Windows Graphics Component can be exploited remotely to gain privileges.
7. A spoofing vulnerability in Microsoft SharePoint Server can be exploited remotely to spoof user interface.
8. A remote code execution vulnerability in Microsoft Excel can be exploited remotely to execute arbitrary code.
9. A denial of service vulnerability in Microsoft Excel can be exploited remotely to cause denial of service.

The following public exploits exists for this vulnerability:

https://github.com/api0cradle/CVE-2023-23397-POC-Powershell

https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY

https://github.com/madelynadams9/CVE-2023-23397-Report

https://github.com/grn-bogo/CVE-2023-23397

https://github.com/alicangnll/CVE-2023-23397

https://github.com/ahmedkhlief/CVE-2023-23397-POC

https://github.com/tiepologian/CVE-2023-23397

https://github.com/moneertv/CVE-2023-23397

https://github.com/jacquesquail/CVE-2023-23397

https://github.com/BronzeBee/cve-2023-23397

https://github.com/stevesec/CVE-2023-23397

https://github.com/Zeppperoni/CVE-2023-23397-Patch

https://github.com/BillSkiCO/CVE-2023-23397_EXPLOIT

https://github.com/Trackflaw/CVE-2023-23397

https://github.com/SecCTechs/CVE-2023-23397

https://github.com/im007/CVE-2023-23397

https://github.com/j0eyv/CVE-2023-23397

https://github.com/ka7ana/CVE-2023-23397

https://github.com/vlad-a-man/CVE-2023-23397

https://github.com/CKevens/CVE-2023-23397-POC

https://github.com/djackreuter/CVE-2023-23397-PoC

https://github.com/cleverg0d/CVE-2023-23397-PoC-PowerShell

https://github.com/ahmedkhlief/CVE-2023-23397-POC-Using-Interop-Outlook

https://github.com/LucaBarile/CVE-2023-23396

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft Excel 2016 (64-bit edition)
Microsoft SharePoint Server 2019
Microsoft Office 2019 for 32-bit editions
Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
Microsoft Outlook 2013 RT Service Pack 1
Microsoft Outlook 2016 (32-bit edition)
Microsoft Office Online Server
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2016 (64-bit edition)
Microsoft Office for Universal
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
Microsoft SharePoint Server Subscription Edition
Microsoft Office Web Apps Server 2013 Service Pack 1
Microsoft Outlook 2016 (64-bit edition)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office LTSC for Mac 2021
Microsoft SharePoint Enterprise Server 2016
Microsoft Excel 2013 RT Service Pack 1
OneDrive for MacOS Installer
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Excel 2016 (32-bit edition)
Microsoft Office for Android
OneDrive for Android
Microsoft Office 2013 RT Service Pack 1
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Microsoft Office 2019 for Mac
Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2016 (32-bit edition)

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update component usually can be accessed from the Control Panel) and updates from the Update Options section, that are listed in your Office Account (Office Account tab usually can be accessed from the File menu)
Install Office updates

CVE-2023-23398
CVE-2023-23391
CVE-2023-24923
CVE-2023-24882
CVE-2023-23397
CVE-2023-24930
CVE-2023-24910
CVE-2023-23395
CVE-2023-23399
CVE-2023-23396

5002254
5002356
5002197
5002358
5002351
5002265
5002367
5002368
5002198
5002355
5002362
5002366
5002168
5002348