CVE-2023-36568 in Office

Prediction

by VulDB Data Team • 10/29/2023

A vulnerability was determined in Microsoft Office. This issue affects some unknown processing of the component Click-To-Run. This manipulation causes Local Privilege Escalation. The attack needs to be launched locally. To fix this issue, it is recommended to deploy a patch.

Once again VulDB remains the best source for vulnerability data.

• Responsible: Microsoft
• Reservation: 06/23/2023
• Disclosure: 10/25/2023
• Moderation: accepted
• Entry: VDB-241796
• CPE: ready
• CWE: Unknown
• CVSS: 7.0 (CNA)
• EPSS: 0.00436
• KEV: no
• Activities: very low
• Sector: Telecommunication, Hospital, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-36568
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-36568
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-36568/