Microsoft Office Visio RCE via Remote Exploit
CVE-2023-21737 Published on January 10, 2023

Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability

Vendor Advisory NVD

Weakness Type

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().


Products Associated with CVE-2023-21737

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-21737 are published in these products:

Microsoft Visio
 
Microsoft Office
 
Microsoft 365 Apps
 
Microsoft Office Long Term Servicing Channel
 

Affected Versions

Microsoft Office 2019: Microsoft 365 Apps for Enterprise: Microsoft Office LTSC 2021: Microsoft Visio 2013 Service Pack 1: Microsoft Visio 2013 Service Pack 1: Microsoft Visio 2016:

Exploit Probability

EPSS
3.28%
Percentile
86.94%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.