Microsoft Office Visio Remote Code Execution Vulnerability

2024-09-1907:00:00

Microsoft

msrc.microsoft.com

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

Low

JSON

Affected configurations

Vulners

Node

microsoftofficeRange<https://aka.ms/OfficeSecurityReleases

microsoftvisioRange<16.0.5465.1001

microsoftoffice_long_term_servicing_channelRange<https://aka.ms/OfficeSecurityReleases

microsoftvisioRange<16.0.5465.1001

microsoft365_appsRange<https://aka.ms/OfficeSecurityReleases

microsoftofficeRange<https://aka.ms/OfficeSecurityReleases

microsoft365_appsRange<https://aka.ms/OfficeSecurityReleases

microsoftoffice_long_term_servicing_channelRange<https://aka.ms/OfficeSecurityReleases

VendorProductVersionCPE
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*
microsoftvisio*cpe:2.3:a:microsoft:visio:*:*:*:*:*:*:*:*
microsoftoffice_long_term_servicing_channel*cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:*
microsoft365_apps*cpe:2.3:a:microsoft:365_apps:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office	*	cpe:2.3:a:microsoft:office::::::::
microsoft	visio	*	cpe:2.3:a:microsoft:visio::::::::
microsoft	office_long_term_servicing_channel	*	cpe:2.3:a:microsoft:office_long_term_servicing_channel::::::::
microsoft	365_apps	*	cpe:2.3:a:microsoft:365_apps::::::::