VDB
CVE-2023-33130
CVE-2023-33130
PUBLISHED
Es existieren mehrere Schwachstellen in verschiedenen Microsoft Office Produkten. Die Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
EPSS 0.43% · 63.1th percentile
Risk Scores
EPSS Score
0.43%
63.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Office 2019 for Mac | |
| Microsoft | Microsoft SharePoint Server 2019 | |
| Microsoft | Microsoft Office Online Server | |
| Microsoft | Microsoft Office LTSC for Mac 2021 | |
| Microsoft | Microsoft Excel 2013 SP1 | |
| Microsoft | Microsoft Excel 2016 | |
| Microsoft | Microsoft Excel 2013 RT SP1 | |
| Microsoft | Microsoft Outlook 2013 | |
| Microsoft | Microsoft Office LTSC 2021 | |
| Microsoft | Microsoft Outlook 2013 RT SP1 | |
| Microsoft | Microsoft Office 2019 | |
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | |
| Microsoft | Microsoft Outlook 2016 | |
| Microsoft | Microsoft SharePoint Server Subscription Edition | |
| Microsoft | Microsoft 365 Apps | |
| Microsoft | Microsoft OneNote for Universal |
Exploit Intelligence
- https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1 (msrc)
- https://www.exploit-db.com/exploits/51555 (certbund)
- https://thehackernews.com/2024/01/act-now-cisa-flags-active-exploitation.html (certbund)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- HKTL_EXPL_POC_PY_SharePoint_CVE_2023_29357_Sep23_1_RID36C9.yar (github-yara)
…and 209 more exploits
Timeline
- Jun 13, 2023 CVE Published
- Jun 14, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 29, 2023 EPSS Score
- Nov 3, 2023 EPSS Score
- Dec 8, 2023 PoC Published
- Dec 9, 2023 EPSS Score
- Dec 11, 2023 PoC Published
- Jan 13, 2024 EPSS Score
- Mar 1, 2024 PoC Published
- Mar 24, 2024 EPSS Score
- Apr 5, 2024 PoC Published
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1443.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1443 advisory
- https://msrc.microsoft.com/update-guide advisory
- https://www.exploit-db.com/exploits/51555 exploit
- https://thehackernews.com/2024/01/act-now-cisa-flags-active-exploitation.html exploit