WID-SEC-W-2023-0391

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Office Produkte: Mehrere Schwachstellen

view advisory published 2023-02-14

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Office und SharePoint Produkten ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmechanismen zu umgehen und Informationen offenzulegen.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2023-21823US—OT criticalKEV
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2023-21721US——
Microsoft OneNote Elevation of Privilege Vulnerability
CVE-2023-21717US——
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-21716UScritical9.8Exploit
Microsoft Word Remote Code Execution Vulnerability
CVE-2023-21715UShigh7.3OT criticalKEV
Microsoft Publisher Security Feature Bypass Vulnerability
CVE-2023-21714US——
Microsoft Office Information Disclosure Vulnerability
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan