CVE-2023-33148
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege / Remote Code Execution | 21 Jul 202300:00 | – | zdt |
 | The vulnerability of the Microsoft Office suite is related to deficiencies in access control, which allow attackers to elevate their privileges within the system. | 18 Jul 202300:00 | – | bdu_fstec |
 | CVE-2023-33148 | 19 Jul 202311:01 | – | circl |
 | Microsoft Office 安全漏洞 | 11 Jul 202300:00 | – | cnnvd |
 | CVE-2023-33148 Microsoft Office Elevation of Privilege Vulnerability | 11 Jul 202317:02 | – | cvelist |
 | Microsoft Office 365 Version 18.2305.1222.0 - Elevation of Privilege + RCE. | 20 Jul 202300:00 | – | exploitdb |
 | EUVD-2023-37333 | 3 Oct 202520:07 | – | euvd |
 | KLA50773 Multiple vulnerabilities in Microsoft Office | 11 Jul 202300:00 | – | kaspersky |
 | Microsoft Office Elevation of Privilege Vulnerability | 11 Jul 202307:00 | – | mscve |
 | Vulnerabilities fixed in Microsoft Office | 11 Jul 202300:00 | – | ncsc |
10
Node
OR
[
{
"vendor": "Microsoft",
"product": "Microsoft Office 2013 Click-to-Run (C2R)",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "15.0.0.0",
"lessThan": "15.0.5571.1000",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Office 2019",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "19.0.0",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft 365 Apps for Enterprise",
"platforms": [
"32-bit Systems",
"x64-based Systems"
],
"versions": [
{
"version": "16.0.1",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Office LTSC 2021",
"platforms": [
"x64-based Systems",
"32-bit Systems"
],
"versions": [
{
"version": "16.0.1",
"lessThan": "https://aka.ms/OfficeSecurityReleases",
"versionType": "custom",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| golemui.bat | binary | attacker.com/uqev/namaikitiputkata/golemui.bat | Macro executes a curl to the attacker host to download a payload and executes it, enabling remote code execution/elevation of privilege via Office macro. | CWE-59 |
| salaries.bat | binary | attacker.com/uqev/namaikitiputkata/salaries.bat | Downloaded batch payload and executed locally as part of the macro exploit chain. | CWE-59 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 06:01Current
7.6High risk
Vulners AI Score7.6
CVSS 3.17.8
EPSS0.0206
SSVC