← back
CVE-2023-28285

Microsoft Office Remote Code Execution Vulnerability

CVSS 7.8 HIGHEPSS 3.0%CWE-416
Microsoft Office Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Microsoft 365 Apps for EnterpriseMicrosoft · Microsoft Office 2019 for MacMicrosoft · Microsoft Office LTSC for Mac 2021
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/173127/Microsoft-Office-Remote-Code-Execution.htmlunverifiedcve_referencepacketstormsecurity.com/files/173140/Microsoft-365-MSO-2305-Build-16.0.16501.20074-Remote-Code-Execution.htmlunverifiedexploitdbwww.exploit-db.com/exploits/51552unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/173127/Microsoft-Office-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/173140/Microsoft-365-MSO-2305-Build-16.0.16501.20074-Remote-Code-Execution.htmlhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28285