VDB
BDU%3A2023-03740
BDU%3A2023-03740
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость пакета программ Microsoft Office, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить привилегии в системе
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corp | Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office 2013 Click-to-Run (C2R), Microsoft Office LTSC 2021 | |
| Microsoft | Microsoft Office LTSC 2021 | 16.0.1 |
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1 |
| microsoft | 365_apps | 16.0.1 |
| Microsoft | Microsoft Office 2013 Click-to-Run (C2R) | 15.0.0.0 |
| microsoft | office_long_term_servicing_channel | 16.0.1 |
| Microsoft | Microsoft Office 2019 | 19.0.0 |
| microsoft | office | 15.0.0.0, 19.0.0 |
Timeline
- Jul 11, 2023 CVE Published
- Jul 19, 2023 PoC Published
- Jul 22, 2023 PoC Published
- Sep 13, 2024 CVE Updated
- May 8, 2026 Security Advisory
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33148 url
- https://www.cybersecurity-help.cz/vdb/SB2023071162 url
- https://vuldb.com/?id.233622 url
- http://packetstormsecurity.com/files/173591/Microsoft-Office-365-18.2305.1222.0-Remote-Code-Execution.html url
- https://packetstorm.news/files/id/173591 exploit