Skip to content
OpenAdvisories
High MSRC-CVE-2023-33148 1 CVE

Microsoft Office Elevation of Privilege Vulnerability

Published Jul 11, 2023 · Updated Jul 11, 2023

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could execute RPC functions that are restricted to local clients only.

According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?
An attacker who successfully exploits this vulnerability could perform a local attack potentially enabling access to the victim user's information, the ability to alter information, or the ability to cause downtime to the target environment.

Security updates
15.0.5571.1000 — https://technet.microsoft.com/en-us/office/mt465751
https — https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References