PT-2023-7008 · Microsoft · Office

Eduardo Braun Prado + 1 · Published 2023-11-14 · Updated 2023-11-20 · CVE-2023-36413

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified)

Description The issue is related to a security feature bypass in Microsoft Office, which is connected to access control errors. Exploitation of this issue may allow an attacker to bypass existing security restrictions. It enables an attacker to have an impact on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

BDU:2023-08028

CVE-2023-36413

Affected Products

Office

References · 8

• https://bdu.fstec.ru/vul/2023-08028 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36413 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36413 · Security Note
• https://osv.dev/vulnerability/CVE-2023-36413 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-36413 · Security Note
• https://t.me/echeloneyes/2167 · Telegram Post
• https://t.me/true_secator/5085 · Telegram Post
• https://twitter.com/CVEnew/status/1724491783826989347 · Twitter Post