Lucene search

K
nvd[email protected]NVD:CVE-2023-36009
HistoryDec 12, 2023 - 6:15 p.m.

CVE-2023-36009

2023-12-1218:15:21
web.nvd.nist.gov
1
microsoft word
information disclosure
vulnerability
cve-2023-36009

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

20.7%

Microsoft Word Information Disclosure Vulnerability

Affected configurations

NVD
Node
microsoft365_appsMatch-enterprisex64
OR
microsoft365_appsMatch-enterprisex86
OR
microsoftofficeMatch2016x64
OR
microsoftofficeMatch2016x86
OR
microsoftofficeMatch2019x64
OR
microsoftofficeMatch2019x86
OR
microsoftofficeMatch2021ltscx64
OR
microsoftofficeMatch2021ltscx86
OR
microsoftofficeMatch2021ltscmacos

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

20.7%