← CVE Intelligence

CVE-2023-21716

Microsoft Word Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / product	Versions
Microsoft / Microsoft 365 Apps for Enterprise	affected 16.0.1 before https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft Office 2019	affected 19.0.0 before https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft Office 2019 for Mac	affected 16.0.0 before 16.70.23021201
Microsoft / Microsoft Office LTSC 2021	affected 16.0.1 before https://aka.ms/OfficeSecurityReleases
Microsoft / Microsoft Office LTSC for Mac 2021	affected 16.0.1 before 16.70.23021201
Microsoft / Microsoft Office Online Server	affected 16.0.1 before 16.0.10395.20001
Microsoft / Microsoft Office Web Apps Server 2013 Service Pack 1	affected 15.0.1 before 15.0.5529.1000
Microsoft / Microsoft SharePoint Enterprise Server 2013 Service Pack 1	affected 15.0.0 before 15.0.5529.1000
Microsoft / Microsoft SharePoint Enterprise Server 2016	affected 16.0.0 before 16.0.5383.1000
Microsoft / Microsoft SharePoint Foundation 2013 Service Pack 1	affected 15.0.0 before 15.0.5529.1000
Microsoft / Microsoft SharePoint Server 2019	affected 16.0.0 before 16.0.10395.20001
Microsoft / Microsoft SharePoint Server Subscription Edition	affected 16.0.0 before 16.0.15601.20478
Microsoft / Microsoft Word 2013 Service Pack 1	affected 15.0.1 before 15.0.5529.1000
Microsoft / Microsoft Word 2013 Service Pack 1	affected 15.0.1 before 15.0.5529.1000
Microsoft / Microsoft Word 2016	affected 16.0.1 before 16.0.5383.1000
Microsoft / SharePoint Server Subscription Edition Language Pack	affected 16.0.0 before 16.0.15601.20478

CWE

CWE-190

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21716

ADP enrichment

CVE

No English description supplied.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21716

CISA-ADP

No English description supplied.

No references supplied.