7.8

CVE-2023-33133

Microsoft Excel Remote Code Execution Vulnerability

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft365 Apps Version- SwEditionenterprise HwPlatformx64
Microsoft365 Apps Version- SwEditionenterprise HwPlatformx86
MicrosoftExcel Version2013 Updatesp1 HwPlatformx64
MicrosoftExcel Version2013 Updatesp1 HwPlatformx86
MicrosoftExcel Version2013 Updatesp1 SwEditionrt
MicrosoftExcel Version2016 HwPlatformx64
MicrosoftExcel Version2016 HwPlatformx86
MicrosoftOffice Long Term Servicing Channel Version2021 HwPlatformx64
MicrosoftOffice Long Term Servicing Channel Version2021 HwPlatformx86
MicrosoftOffice Long Term Servicing Channel Version2021 SwPlatformmacos
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 14.18% 0.939
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
secure@microsoft.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().