CVE-2023-21716

CriticalCVSS 9.8

Published: 14/02/2023(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

82.30%

100th percentile - higher than 100% of all known CVEs

Summary

Remote code execution vulnerability in Microsoft Word. An attacker could exploit this vulnerability to execute arbitrary code in the context of the logged-on user.

Risk Assessment

Risk of system compromise if a user opens a specially crafted Word document.

Recommendation

Install the latest security updates for Microsoft Word and Office.

Original NVD description (English source)

Microsoft Word Remote Code Execution Vulnerability