CVE-2023-21823: high-severity vulnerability in Microsoft Office for Android
Windows Graphics Component Remote Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply updates per vendor instructions.
A flaw in Windows Graphics Component allows attackers to run malicious code on a computer by exploiting an integer overflow vulnerability. This is dangerous because it can give attackers full control over your system without needing special permissions.
Integer overflow in Windows Graphics Component allows remote code execution through crafted input to graphics processing functions. Exploitation requires user interaction (opening a malicious file or visiting a compromised webpage) but results in code execution with the privileges of the affected process, potentially leading to system compromise.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.