CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-02-14
Microsoft Publisher Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2023-21715) Analysis & Mitigation Guide
[Affected Scope] Microsoft Office and Microsoft Publisher 2013, 2016, 2019, 2021, and Microsoft 365 Apps
[Impact] Attackers can bypass Office macro blocking policies (Mark of the Web) via specially crafted Publisher files to execute arbitrary code
[Mitigation] Apply official Microsoft security patches immediately and enforce registry policies to disable Publisher macros