CVE Catalog
Actively exploited in the wild
Microsoft Office Publisher Security Feature Bypass Vulnerability
Microsoft - Office · Listed in the CISA KEV since 2023-02-14. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2023-21715
HighCVSS 7.3KEVExploitation Probability (EPSS)
Very high risk12.01%
96th percentile - higher than 96% of all known CVEs
Summary
Microsoft Publisher Security Feature Bypass Vulnerability. Details are not provided in the description, but it allows an attacker to bypass security features.
Risk Assessment
An attacker could exploit this flaw to bypass Publisher security, potentially facilitating other attacks such as malicious code execution.
Recommendation
It is recommended to apply patches released by Microsoft for Publisher.
Original NVD description (English source)
Microsoft Publisher Security Feature Bypass Vulnerability