CVE-2023-23398

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Microsoft Excel Spoofing Vulnerability

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-290

Affected software

VendorProductVersions
MicrosoftMicrosoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Excel 2016>= 16.0.0.0, < 16.0.5387.1000
MicrosoftMicrosoft Excel 2013 Service Pack 1>= 15.0.0.0, < 15.0.5537.1000

References

Timeline

Published
Mar 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-233997.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2023-23405.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-234007.2Windows DNS Server Remote Code Execution VulnerabilityCVE-2023-234017.8Windows Media Remote Code Execution VulnerabilityCVE-2023-234027.8Windows Media Remote Code Execution VulnerabilityCVE-2023-234038.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-234048.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2023-234058.1Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2023-234068.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-234077.1Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution VulnerabilityCVE-2023-234084.5Azure Apache Ambari Spoofing VulnerabilityCVE-2023-234095.5Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
CVE-2023-23398: High severity, CVSS 7.1 | Vulnix