CVE-2023-33158

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jul 11, 2023
Updated: May 29, 2024
CWE ID 191

Summary

CVE-2023-33158 is a remote code execution vulnerability affecting Microsoft Excel. Attackers can exploit this flaw by sending specially crafted Excel files to victims, causing the software to execute arbitrary code when processing the files. Successful exploitation could allow attackers to gain control of the affected system, install malware, or steal sensitive information. Users are advised to apply the available patch or update to their Microsoft Excel software to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Office
  • Microsoft 365 Apps

Affected Vendors

  • Microsoft