Vulners
Lucene search
CVE-2023-28311
🗓️ 11 Apr 2023 19:14:03Reported by microsoftType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 203 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 24 |
|---|---|---|---|---|
 | Microsoft Word 16.72.23040900 - Remote Code Execution Vulnerability | 20 Apr 202300:00 | – | zdt |
 | Microsoft Patch Tuesday April 2023: CLFS EoP, Word RCE, MSMQ QueueJumper RCE, PCL6, DNS, DHCP | 27 Apr 202322:03 | – | avleonov |
 | CVE-2023-28311 | 11 Apr 202320:59 | – | circl |
 | Microsoft Word 安全漏洞 | 11 Apr 202300:00 | – | cnnvd |
 | Microsoft Word Code Execution Vulnerability (CNVD-2025-17485) | 13 Apr 202300:00 | – | cnvd |
 | CVE-2023-28311 Microsoft Word Remote Code Execution Vulnerability | 11 Apr 202319:14 | – | cvelist |
 | Microsoft Word 16.72.23040900 - Remote Code Execution (RCE) | 20 Apr 202300:00 | – | exploitdb |
 | EUVD-2023-32018 | 3 Oct 202520:07 | – | euvd |
 | KLA48823 Multiple vulnerabilities in Microsoft Office | 11 Apr 202300:00 | – | kaspersky |
 | Security Updates for Microsoft Office Products (Apr 2023) (macOS) | 12 Apr 202300:00 | – | nessus |
10
[
{
"vendor": "Microsoft",
"product": "Microsoft Office 2019 for Mac",
"platforms": [
"Unknown"
],
"versions": [
{
"version": "16.0.0",
"lessThan": "16.72.23040900",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft 365 Apps for Enterprise",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.1",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC for Mac 2021",
"platforms": [
"Unknown"
],
"versions": [
{
"version": "16.0.1",
"lessThan": "16.72.23040900",
"versionType": "custom",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| ChushkI/ebanie.tarator | path | tarator.com/ChushkI/ebanie.tarator | Exploit payload URL used in VBScript curl command to fetch a malicious tarball enabling RCE when opening poisoned Word file. | CWE-122 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Jan 2025 01:05Current
7.8High risk
Vulners AI Score7.8
CVSS 3.17.8
EPSS0.08353
SSVC