PT-2023-4990 · Microsoft · 365+4
Rocco Calvi
+1
·
Publicado
2023-09-12
·
Atualizado
2024-05-29
·
CVE-2023-36766
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Microsoft Excel (affected versions not specified)
Microsoft 365 (affected versions not specified)
Microsoft Office (affected versions not specified)
Microsoft Office Long Term Servicing Channel (affected versions not specified)
Microsoft Office Online Server (affected versions not specified)
Description
The issue is related to insufficient protection of internal data in Microsoft Excel, allowing an attacker to gain unauthorized access to protected information by opening a specially crafted file. This can lead to the disclosure of sensitive information.
Recommendations
For Microsoft Excel, consider restricting access to sensitive files until a patch is available.
For Microsoft 365, update to a version that includes the fix for this issue.
For Microsoft Office, apply configuration changes to protect internal data.
For Microsoft Office Long Term Servicing Channel, restrict the use of vulnerable components.
For Microsoft Office Online Server, avoid using the affected functionality until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
365
Office Excel
Office
Office Long Term Servicing Channel
Office Online Server