CVE-2023-36569
CVSS 3.1 Score 8.4 of 10 (high)
Details
Published Oct 10, 2023
Updated: Oct 13, 2023
Summary
CVE-2023-36569 is a newly disclosed vulnerability affecting Microsoft Office. This Elevation of Privilege (EoP) issue allows an attacker to gain heightened system privileges by exploiting a flaw in Microsoft Office software. Successful exploitation could result in the installation of unauthorized software, unauthorized access to sensitive data, or other malicious activities. Users are strongly advised to install the available Microsoft patch as soon as possible to mitigate this risk. Failure to do so may leave systems susceptible to potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Microsoft Office
- Microsoft 365 Apps
- Microsoft Office 365
Affected Vendors
- Microsoft