VDB
CVE-2023-21721
CVE-2023-21721
PUBLISHED
In verschiedenen Microsoft Office und SharePoint Produkten existieren mehrere Schwachstellen. Ein Angreifer kann dadurch seine Privilegien auf SYSTEM Rechte ausweiten, beliebigen Code zur Ausführung bringen, Sicherheitsmechanismen umgehen und Informationen offenlegen. Für die Ausnutzung einiger Schwachstellen ist eine Benutzeraktion erforderlich.
EPSS 6.12% · 91.0th percentile
Risk Scores
EPSS Score
6.12%
91.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Office for iOS | |
| Microsoft | Microsoft SharePoint Foundation 2013 SP1 | |
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | |
| Microsoft | Microsoft Office Web Apps Server 2013 SP1 | |
| Microsoft | Microsoft Office LTSC for Mac 2021 | |
| Microsoft | Microsoft Office 2019 for Mac | |
| Microsoft | Microsoft Office for Universal | |
| Microsoft | Microsoft SharePoint Server Subscription Edition | |
| Microsoft | Microsoft SharePoint Server Subscription Edition Language Pack | |
| Microsoft | Microsoft Office Online Server | |
| Microsoft | Microsoft Word 2013 SP1 | |
| Microsoft | Microsoft Office LTSC 2021 | |
| Microsoft | Microsoft SharePoint Enterprise Server 2013 SP1 | |
| Microsoft | Microsoft SharePoint Server 2019 | |
| Microsoft | Microsoft Word 2016 | |
| Microsoft | Microsoft OneNote for Android | |
| Microsoft | Microsoft 365 Apps | |
| Microsoft | Microsoft Office for Android | |
| Microsoft | Microsoft Word 2013 RT SP1 |
Timeline
- Feb 14, 2023 CVE Published
- Feb 15, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 7, 2023 PoC Published
- May 5, 2023 EPSS Score
- Jun 14, 2023 EPSS Score
- Jul 24, 2023 EPSS Score
- Oct 11, 2023 EPSS Score
- Nov 20, 2023 EPSS Score
- Dec 29, 2023 EPSS Score
- Feb 7, 2024 EPSS Score
- Mar 1, 2024 PoC Published