CVE-2023-3314

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external commands used to control the process execution of the .zip application allows an authorized user to obtain control of the .zip application to execute arbitrary commands or obtain elevation of system privileges.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Jul 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-331406.5Microsoft OneNote Spoofing VulnerabilityCVE-2023-331417.5Yet Another Reverse Proxy (YARP) Denial of Service VulnerabilityCVE-2023-331426.5Microsoft SharePoint Server Elevation of Privilege VulnerabilityCVE-2023-331437.5Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2023-331446.6Visual Studio Code Spoofing VulnerabilityCVE-2023-331456.5Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2023-331467.8Microsoft Office Remote Code Execution VulnerabilityCVE-2023-331487.8Microsoft Office Elevation of Privilege VulnerabilityCVE-2023-331497.8Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2023-33154.3Missing permission checks in Jenkins Team Concert Plugin 2.4.1 and earlier allow attackers with Overall/Read permission to check for the exiCVE-2023-331509.6Microsoft Office Security Feature Bypass VulnerabilityCVE-2023-331516.5Microsoft Outlook Spoofing Vulnerability
CVE-2023-3314: High severity, CVSS 8.8 | Vulnix