CVE-2023-23396

FAQ

How could an attacker exploit this vulnerability?

The attacker could exploit this vulnerability by convincing a victim to open a specially crafted XLSX file which when opened would cause a denial-of-service condition for other processes running on that machine.

Is the Preview Pane an attack vector for this vulnerability?

No, the Preview Pane is not an attack vector.

According to the CVSS metric, the attack vector is network (AV:N). What does that mean for this vulnerability?

An attacker could trigger this vulnerability by convincing a victim to access a malicious file via a network connection or by downloading and opening the malicious file locally. In the worst case scenario, the malicious file could be triggered with a web request (AV:N). When multiple attack vectors can be used, we assign a score based on the scenario with the higher risk.