CVE-2023-21714

MediumCVSS 5.5/10Last modified Aug 19, 2026

Description

Microsoft Office Information Disclosure Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125CWE-668

Affected software

VendorProductVersions
MicrosoftMicrosoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases

References

Timeline

Published
Feb 14, 2023
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-217157.3Microsoft Publisher Security Feature Bypass VulnerabilityCVE-2023-217169.8Microsoft Word Remote Code Execution VulnerabilityCVE-2023-217178.8Microsoft SharePoint Server Elevation of Privilege VulnerabilityCVE-2023-217187.8Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityCVE-2023-217196.5Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityCVE-2023-21724.3The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due toCVE-2023-217205.3Microsoft Edge (Chromium-based) Tampering VulnerabilityCVE-2023-217216.5Microsoft OneNote Elevation of Privilege VulnerabilityCVE-2023-217225.0.NET Framework Denial of Service VulnerabilityCVE-2023-217247.8Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVE-2023-217256.3Windows Malicious Software Removal Tool Elevation of Privilege VulnerabilityCVE-2023-217267.8Windows Credential Manager User Interface Elevation of Privilege Vulnerability
CVE-2023-21714: Medium severity, CVSS 5.5 | Vulnix