Security features bypass in Microsoft products - CVE-2023-36767
Published: September 13, 2023
Vulnerability identifier: #VU80723
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-36767
CWE-ID: CWE-254
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to security features bypass in Microsoft Office. A remote attacker can bypass the protection in Outlook.
Affected software
Microsoft Office LTSC
Microsoft 365 Apps for Enterprise
Microsoft Office
Microsoft 365 Apps for Enterprise
Microsoft Office
How to mitigate CVE-2023-36767
Install updates from vendor's website.