Lucene search

CVE-2023-28285

🗓️ 11 Apr 2023 21:26:15Reported by microsoftType

Microsoft Office Remote Code Execution Vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 17
Packet Storm	Microsoft 365 MSO 2305 Build 16.0.16501.20074 Remote Code Execution	27 Jun 202300:00	–	packetstorm
Packet Storm	Microsoft Office Remote Code Execution	26 Jun 202300:00	–	packetstorm
Tenable Nessus	Security Updates for Microsoft Office Products C2R (April 2023)	13 Apr 202300:00	–	nessus
Tenable Nessus	Security Updates for Microsoft Office Products (Apr 2023) (macOS)	12 Apr 202300:00	–	nessus
Prion	Remote code execution	11 Apr 202321:15	–	prion
Zero Day Initiative	Microsoft Office Word SKP File Parsing Use-After-Free Remote Code Execution Vulnerability	11 Apr 202300:00	–	zdi
Cvelist	CVE-2023-28285 Microsoft Office Remote Code Execution Vulnerability	11 Apr 202319:13	–	cvelist
0day.today	Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 64-bit Remote Code Execution Vulnerability	26 Jun 202300:00	–	zdt
Exploit DB	Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 64-bit - Remote Code Execution (RCE)	3 Jul 202300:00	–	exploitdb
NVD	CVE-2023-28285	11 Apr 202321:15	–	nvd

Nvd

Vulners

Node

microsoft 365_appsMatch-enterprise

microsoft officeMatch2019macos

microsoft office_long_term_servicing_channelMatch2021macos

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office 2019 for Mac",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.72.23040900",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft 365 Apps for Enterprise",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office LTSC for Mac 2021",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "16.72.23040900",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28285
packetstormsecurity	www.packetstormsecurity.com/files/173127/Microsoft-Office-Remote-Code-Execution.html
packetstormsecurity	www.packetstormsecurity.com/files/173140/Microsoft-365-MSO-2305-Build-16.0.16501.20074-Remote-Code-Execution.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Apr 2023 21:15Current

7.8High risk

Vulners AI Score7.8

CVSS37.8

EPSS0.01478

SSVC

CWE-416