CVE-2023-33158
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jul 11, 2023
Updated: May 29, 2024
CWE ID 191
Summary
CVE-2023-33158 is a remote code execution vulnerability affecting Microsoft Excel. Attackers can exploit this flaw by sending specially crafted Excel files to victims, causing the software to execute arbitrary code when processing the files. Successful exploitation could allow attackers to gain control of the affected system, install malware, or steal sensitive information. Users are advised to apply the available patch or update to their Microsoft Excel software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Microsoft Office
- Microsoft 365 Apps
Affected Vendors
- Microsoft