Lucene search

K
nvd[email protected]NVD:CVE-2023-36762
HistorySep 12, 2023 - 5:15 p.m.

CVE-2023-36762

2023-09-1217:15:12
CWE-20
web.nvd.nist.gov
2
microsoft word
remote code execution
vulnerability

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.3%

Microsoft Word Remote Code Execution Vulnerability

Affected configurations

NVD
Node
microsoft365_appsMatch-enterprisex64
OR
microsoft365_appsMatch-enterprisex86
OR
microsoftofficeMatch2019x64
OR
microsoftofficeMatch2019x86
OR
microsoftofficeMatch2019macos
OR
microsoftoffice_long_term_servicing_channelMatch2021x64
OR
microsoftoffice_long_term_servicing_channelMatch2021x86
OR
microsoftoffice_long_term_servicing_channelMatch2021macos
OR
microsoftsharepoint_serverMatch2016enterprise
OR
microsoftwordMatch2016x64
OR
microsoftwordMatch2016x86

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.3%