We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-36568

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability



Assignermicrosoft
Reserved2023-06-23
Published2023-10-10
Updated2024-08-02

Description

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability



HIGH: 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Problem types

CWE-59: Improper Link Resolution Before File Access ('Link Following')

Product status

19.0.0 before https://aka.ms/OfficeSecurityReleases
affected

16.0.1 before https://aka.ms/OfficeSecurityReleases
affected

16.0.1 before https://aka.ms/OfficeSecurityReleases
affected

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36568 (Microsoft Office Click-To-Run Elevation of Privilege Vulnerability) vendor-advisory

cve.org CVE-2023-36568

nvd.nist.gov CVE-2023-36568

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.