high7.8Public exploit code
CVE-2023-28285
Microsoft Office Remote Code Execution Vulnerability
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft 365 MSO (Version 2305 Build 16.0.16501.20074) 64-bit - Remote Code Execution (RCE)2023-07-03 · remote · multiple
Impact
Microsoft Office Remote Code Execution Vulnerability
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | 365 Apps | All versions |
| Microsoft | Office | Version 2019 |
| Microsoft | Office Long Term Servicing Channel | Version 2021 |
Weakness classification
References
- NVD record
- CVE.org record
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28285
- http://packetstormsecurity.com/files/173127/Microsoft-Office-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/173140/Microsoft-365-MSO-2305-Build-16.0.16501.20074-Remote-Code-Execution.html
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28285