Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2023-21741

Опубликовано: 10 янв. 2023
Источник: msrc
CVSS3: 7.1
EPSS Низкий

Описание

Microsoft Office Visio Information Disclosure Vulnerability

FAQ

What type of information could be disclosed by this vulnerability?

The type of information that could be disclosed if an attacker successfully exploited this vulnerability is remote heap memory.

According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of availability (A:L)? What does that mean for this vulnerability?

The performance can be interrupted and/or reduced, but the attacker cannot fully deny service.

Обновления

ПродуктСтатьяОбновление
Microsoft Visio 2013 Service Pack 1 (32-bit editions)
Microsoft Visio 2013 Service Pack 1 (64-bit editions)
Microsoft Visio 2016 (32-bit edition)
Microsoft Visio 2016 (64-bit edition)
Microsoft Office 2019 for 32-bit editions
-
Microsoft Office 2019 for 64-bit editions
-
Microsoft 365 Apps for Enterprise for 32-bit Systems
-
Microsoft 365 Apps for Enterprise for 64-bit Systems
-
Microsoft Office LTSC 2021 for 64-bit editions
-
Microsoft Office LTSC 2021 for 32-bit editions
-

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 87%
0.03217
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
nvd
около 3 лет назад

Microsoft Office Visio Information Disclosure Vulnerability

CVSS3: 7.1
github
около 3 лет назад

Microsoft Office Visio Information Disclosure Vulnerability.

CVSS3: 7.1
fstec
около 3 лет назад

Уязвимость графического редактора Microsoft Visio, пакетов программ Microsoft Office и 365 Apps for Enterprise, связанная с недостаточной защитой служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 87%
0.03217
Низкий

7.1 High

CVSS3