Security Updates for Microsoft Office Products C2R (July 2023)

The Microsoft Office Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A security feature bypass vulnerability. CVE-2023-33150 - An elevation of privilege vulnerability. CVE-2023-33148 - Multiple remote code execution vulnerabilities...

CVE-2023-33150

CVE-2023-33150 is a Microsoft Office/security feature bypass vulnerability affecting Word components. OpenVAS/NVD entries describe a high-severity issue (CVSSv3.1: 9.6) with network access, no privileges, user interaction required, and high impacts to confidentiality, integrity, and availability....

CVE-2023-33150 Microsoft Office Security Feature Bypass Vulnerability

...

End of support for Office 2016 and Office 2019

None None...

KLA50773 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code...