CVE-2023-36767

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Microsoft Office Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
MicrosoftMicrosoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 2019 for Mac>= 16.0.0, < 16.77.23091003
MicrosoftMicrosoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC for Mac 2021>= 16.0.1, < 16.77.23091003
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 2016>= 16.0.0, < 16.0.5413.1000
MicrosoftMicrosoft Office 2013 Service Pack 1>= 15.0.0, < 15.0.5589.1000

References

Timeline

Published
Sep 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-367695.4Microsoft OneNote Spoofing VulnerabilityCVE-2023-36778.8The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to SQL Injection via the pageId parameter in versions up to, and inclCVE-2023-367707.83D Builder Remote Code Execution VulnerabilityCVE-2023-367717.83D Builder Remote Code Execution VulnerabilityCVE-2023-367727.83D Builder Remote Code Execution VulnerabilityCVE-2023-367737.83D Builder Remote Code Execution VulnerabilityCVE-2023-367767.0Win32k Elevation of Privilege VulnerabilityCVE-2023-367775.7Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2023-367788.0Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-36789.8A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerabilCVE-2023-367807.2Skype for Business Remote Code Execution VulnerabilityCVE-2023-367857.8Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-36767: Medium severity, CVSS 4.3 | Vulnix