Microsoft Word Remote Code Execution Vulnerability

CVE-2023-36762

Summary

A remote code execution vulnerability exists in Microsoft Word when it improperly handles objects in memory. An attacker who successfully exploits this vulnerability could execute arbitrary code on the affected system. The attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The risk is particularly high when a user opens a specially crafted document that triggers the flaw. Users and administrators should ensure that they apply the latest security updates to mitigate potential exploitation.

References