WID-SEC-W-2023-2330

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Office: Mehrere Schwachstellen

view advisory published 2023-09-12

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Office Produkten ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und Informationen falsch darzustellen.

01

describes (8)

Related CVEs.

IDseverity exploitable
CVE-2023-41764US——
Microsoft Office Spoofing Vulnerability
CVE-2023-36767USmedium4.3—
Microsoft Office Security Feature Bypass Vulnerability
CVE-2023-36766USmedium5.5—
Microsoft Excel Information Disclosure Vulnerability
CVE-2023-36765UScritical9.8—
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-36764US——
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-36763US——
Microsoft Outlook Information Disclosure Vulnerability
CVE-2023-36762US——
Microsoft Word Remote Code Execution Vulnerability
CVE-2023-36761USmedium6.5OT criticalKEV
Microsoft Word Information Disclosure Vulnerability
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan