Skip to content
OpenAdvisories
Critical MSRC-CVE-2023-21716 1 CVE

Microsoft Word Remote Code Execution Vulnerability

Published Feb 14, 2023 · Updated Feb 23, 2023 · Revision 3

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What is the attack vector for this vulnerability?
An unauthenticated attacker could send a malicious e-mail containing an RTF payload that would allow them to gain access to execute commands within the application used to open the malicious file.

Is the Preview Pane an attack vector for this vulnerability?
Yes, the Preview Pane is an attack vector.

I am running SharePoint Enterprise Server 2013 Service Pack 1. Do I need to install all the updates that are listed for SharePoint Enterprise Server 2013 Service Pack 1?
No. Customers running SharePoint Enterprise Server 2013 Service Pack 1 should install either of the following:
Cumulative update (ubersrv13). Note that this update also includes the *srvloc2013 update, Both of the security updates (sts2013 AND *loc2013), which are the same updates as for Foundation Server 2013
Please note that this is a clarification of the existing servicing model for SharePoint Server 2013 and applies for all previous updates.

I am running SharePoint Foundation 2013 Service Pack 1. Do I need to install all the updates that are listed for SharePoint Foundation 2013 Service Pack 1 ?
Yes, customers running SharePoint Foundation 2013 Service Pack 1 should install both of the security updates. The updates can be installed in any order.

Security updates
16.70.23021201 — https://go.microsoft.com/fwlink/p/?linkid=831049
https — https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
16.0.15601.20478 — https://support.microsoft.com/help/5002353
16.0.15601.20478 — https://support.microsoft.com/help/5002352
16.0.10395.20001 — https://support.microsoft.com/help/5002309
16.0.5383.1000 — https://support.microsoft.com/help/5002325
15.0.5529.1000 — https://support.microsoft.com/help/5002346
15.0.5529.1000 — https://support.microsoft.com/help/5002347
15.0.5529.1000 — https://support.microsoft.com/help/5002312
16.0.10395.20001 — https://support.microsoft.com/help/5002342
16.0.10395.20001 — https://support.microsoft.com/help/5002330
16.0.5383.1000 — https://support.microsoft.com/kb/5002323
15.0.5529.1000 — https://support.microsoft.com/kb/5002313
15.0.5529.1000 — https://support.microsoft.com/kb/5002316
15.0.5529.1000 — https://support.microsoft.com/help/5002316

Vulnerabilities 1

Revision history

  1. #3

    The following updates have been made: 1) In the Security Updates table, added the following versions of Microsoft Office as they are also affected by this vulnerability: Microsoft Office 2019 for 32-bit editions and Microsoft Office 2019 for 64-bit editions. Microsoft strongly recommends that customers running any of these versions of Office install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action. 2) Added additional Microsoft Office and Microsoft Outlook workaround guidance.

  2. #2

    Added FAQs section and added clarifying information to the Mitigations section. This is an informational change only.

  3. #1

    Information published.

References