Microsoft Word Information Disclosure Vulnerability
CVE-2023-36761

6.5MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Office 2019; Microsoft 365 Apps For Enterprise; Microsoft Office Ltsc 2021; Microsoft Word 2016
Vendor: CVE Published:; 12 September 2023

🔔 Create Microsoft Vulnerability Alert

Badges

👾 Exploit Exists🦅 CISA Reported📰 News Worthy

What is CVE-2023-36761?

Microsoft Word Information Disclosure Vulnerability

CISA has reported CVE-2023-36761

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2023-36761 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Affected Version(s)

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office 2019 32-bit Systems 19.0.0

Microsoft Office LTSC 2021 x64-based Systems 16.0.1

News Articles

Krebs on Security

CVE-2023-4863 CVE-2023-36761

Adobe, Apple, Google & Microsoft Patch 0-Day Bugs

Microsoft today issued software updates to fix at least five dozen security holes in Windows and supported software, including patches for two zero-day vulnerabilities that are already being exploited. Also, Adobe, Google Chrome and Apple iOS users may have their…