Lucene search

[email protected]CVE-2023-28287

HistoryJun 17, 2023 - 1:15 a.m.

CVE-2023-28287

2023-06-1701:15:41

CWE-416

[email protected]

web.nvd.nist.gov

261

cve-2023-28287

nvd

microsoft publisher

remote code execution

vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

51.1%

JSON

Microsoft Publisher Remote Code Execution Vulnerability

Affected configurations

Vulners

NVD

Node

microsoftpublisherMatch2016

Node

microsoftpublisherMatch2013sp1

Node

microsoftoffice_long_term_servicing_channelMatch2021

Node

microsoft365_appsMatch-

Node

microsoftofficeMatch2019

VendorProductVersionCPE
microsoftmicrosoft_publisher_2016*cpe:2.3:a:microsoft:microsoft_publisher_2016:*:*:*:*:*:*:*:*
microsoftmicrosoft_publisher_2013_sp1*cpe:2.3:a:microsoft:microsoft_publisher_2013_sp1:*:sp1:*:*:*:*:*:*
microsoftmicrosoft_office_ltsc_202116.0.1cpe:2.3:a:microsoft:microsoft_office_ltsc_2021:16.0.1:*:*:*:*:*:*:*
microsoft365_apps16.0.1cpe:2.3:a:microsoft:365_apps:16.0.1:*:*:*:*:*:*:*
microsoftmicrosoft_office_201919.0.0cpe:2.3:a:microsoft:microsoft_office_2019:19.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	microsoft_publisher_2016	*	cpe:2.3:a:microsoft:microsoft_publisher_2016::::::::
microsoft	microsoft_publisher_2013_sp1	*	cpe:2.3:a:microsoft:microsoft_publisher_2013_sp1::sp1::::::*
microsoft	microsoft_office_ltsc_2021	16.0.1	cpe:2.3:a:microsoft:microsoft_office_ltsc_2021:16.0.1:::::::*
microsoft	365_apps	16.0.1	cpe:2.3:a:microsoft:365_apps:16.0.1:::::::*
microsoft	microsoft_office_2019	19.0.0	cpe:2.3:a:microsoft:microsoft_office_2019:19.0.0:::::::*

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Publisher 2016",
    "cpes": [
      "cpe:2.3:a:microsoft:publisher:2016:*:*:*:*:*:x86:*",
      "cpe:2.3:a:microsoft:publisher:2016:*:*:*:*:*:x64:*"
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.5391.1000",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Publisher 2013 Service Pack 1",
    "cpes": [
      "cpe:2.3:a:microsoft:publisher:2013:sp1:*:*:*:*:*:*"
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems",
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "15.0.0",
        "lessThan": "15.0.5545.1000",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office LTSC 2021",
    "cpes": [
      "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems",
      "32-bit Systems"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft 365 Apps for Enterprise",
    "cpes": [
      "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*"
    ],
    "platforms": [
      "x64-based Systems",
      "32-bit Systems"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office 2019",
    "cpes": [
      "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems",
      "32-bit Systems"
    ],
    "versions": [
      {
        "version": "19.0.0",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]