coldbraid

CVE-2023-21715 Microsoft Office

Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system.

CVSS
not scored

CWE-863

On CISA’s exploited list

Microsoft Office Publisher Security Feature Bypass Vulnerability

Added
2023-02-14
Federal patch deadline
2023-03-07
Ransomware use
not known