FlagThis
← Back to CVE List
Vulnerability Intelligence Report
Microsoft Publisher Security Feature Bypass Vulnerability

CVE-2023-21715

Microsoft Publisher Security Feature Bypass Vulnerability

CISA KEV SSVC: Active Exploitation
CVSS Base Score
7.3
HIGH
Exploitability:1.4
Impact Score:5.9
EPSS Probability:12.01%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

CWE-863 ↗CWE-863 Incorrect Authorization

Affected Products & Versions

Vendor Product Affected Versions
Microsoft Microsoft 365 Apps for Enterprise 16.0.1 < https://aka.ms/OfficeSecurityReleases (affected)

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗
No reference links found.

Threat Intelligence Signals

CISA KEV
ACTIVE IN CATALOG
EPSS Score
12.011%
GitHub Advisory
GHSA-9gf3-6wpf-hgpx ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMicrosoft Corporation · Vendor · USA
Reserved2022-12-13T18:08:03
Published2023-02-14T19:33:44
Patch Date2023-02-14
Last Updated2026-08-19T16:27:12

Related Intelligence

Related CVEs
CVE-2026-78509 CVSS 9.8 — Heap-based buffer overflow in Microsoft Office Outlook allows an unaut…
CVE-2026-78510 CVSS 9.8 — Heap-based buffer overflow in Microsoft Office allows an unauthorized …
CVE-2024-21413 CVSS 9.8 — Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-23397 CVSS 9.8 — Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2023-21716 CVSS 9.8 — Microsoft Word Remote Code Execution Vulnerability
LINK COPIED TO CLIPBOARD