CVE-2023-35372
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
A vulnerability in Microsoft Office Visio allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw to run malicious software on the compromised device.
Risk Assessment
Organizations may face serious threats, including data loss and security breaches, if this vulnerability is exploited. Remote code execution can lead to full control over the system.
Recommendation
It is recommended to update Microsoft Office Visio to the latest version to mitigate this vulnerability. Additionally, monitoring and restricting access to potentially vulnerable systems is advised.
Other vulnerabilities in Microsoft Office Visio
See all- CVE-2022-44696High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2022-44695High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-44694High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-24510High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-24509High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2022-24461High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2021-38654High
Remote code execution vulnerability in Microsoft Office Visio. It could allow an attacker to execute code on the victim's system.
- CVE-2021-38653High
Remote code execution vulnerability in Microsoft Office Visio. Similar to other Visio flaws, it could allow an attacker to run code.
- CVE-2024-38016High
A remote code execution vulnerability in Microsoft Office Visio.
- CVE-2024-43463High
Vulnerability in Microsoft Office Visio allows remote code execution. An attacker could exploit it to run malicious code on the victim's system.
Original NVD description (English source)
Microsoft Office Visio Remote Code Execution Vulnerability