VDB
CVE-2023-33131
CVE-2023-33131
PUBLISHED
Es existieren mehrere Schwachstellen in verschiedenen Microsoft Office Produkten. Die Fehler sind noch nicht im Detail beschrieben. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion.
EPSS 2.75% · 86.3th percentile
Risk Scores
EPSS Score
2.75%
86.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | |
| Microsoft | Microsoft Outlook 2013 RT SP1 | |
| Microsoft | Microsoft Excel 2016 | |
| Microsoft | Microsoft SharePoint Server 2019 | |
| Microsoft | Microsoft Office 2019 | |
| Microsoft | Microsoft Outlook 2016 | |
| Microsoft | Microsoft SharePoint Server Subscription Edition | |
| Microsoft | Microsoft Excel 2013 RT SP1 | |
| Microsoft | Microsoft Office LTSC for Mac 2021 | |
| Microsoft | Microsoft 365 Apps | |
| Microsoft | Microsoft Office Online Server | |
| Microsoft | Microsoft Outlook 2013 | |
| Microsoft | Microsoft Office LTSC 2021 | |
| Microsoft | Microsoft Excel 2013 SP1 | |
| Microsoft | Microsoft Office 2019 for Mac | |
| Microsoft | Microsoft OneNote for Universal |
Exploit Intelligence
- https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1 (msrc)
- https://www.exploit-db.com/exploits/51555 (certbund)
- https://thehackernews.com/2024/01/act-now-cisa-flags-active-exploitation.html (certbund)
- Microsoft Outlook Microsoft 365 MSO (Version 2306 Build 16.0.16529.20100) 32-bit - Remote Code Execution (remote) by nu11secur1ty (coalition_cess)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
- expl_sharepoint_cve_2023_29357.yar (github-yara)
…and 212 more exploits
Timeline
- Jun 13, 2023 CVE Published
- Jun 14, 2023 EPSS Score
- Jun 22, 2023 EPSS Score
- Jul 8, 2023 EPSS Score
- Jul 10, 2023 PoC Published
- Jul 12, 2023 EPSS Score
- Jul 16, 2023 EPSS Score
- Sep 15, 2023 EPSS Score
- Sep 20, 2023 EPSS Score
- Nov 16, 2023 EPSS Score
- Nov 24, 2023 EPSS Score
- Dec 4, 2023 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1443.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1443 advisory
- https://msrc.microsoft.com/update-guide advisory
- https://www.exploit-db.com/exploits/51555 exploit
- https://thehackernews.com/2024/01/act-now-cisa-flags-active-exploitation.html exploit