CVE-2023-36866
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
Risk Assessment
Exploitation of this vulnerability could lead to serious security breaches, including data theft and remote access to organizational systems.
Recommendation
It is recommended to update Microsoft Office Visio to the latest version to patch this vulnerability. Additionally, systems should be monitored for unauthorized activity.
Other vulnerabilities in Microsoft Office Visio
See all- CVE-2022-44696High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2022-44695High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-44694High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-24510High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to gain control over the victim's system.
- CVE-2022-24509High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2022-24461High
A vulnerability in Microsoft Office Visio allows for remote code execution. An attacker can exploit this flaw to take control of the victim's system.
- CVE-2021-38654High
Remote code execution vulnerability in Microsoft Office Visio. It could allow an attacker to execute code on the victim's system.
- CVE-2021-38653High
Remote code execution vulnerability in Microsoft Office Visio. Similar to other Visio flaws, it could allow an attacker to run code.
- CVE-2024-38016High
A remote code execution vulnerability in Microsoft Office Visio.
- CVE-2024-43463High
Vulnerability in Microsoft Office Visio allows remote code execution. An attacker could exploit it to run malicious code on the victim's system.
Original NVD description (English source)
Microsoft Office Visio Remote Code Execution Vulnerability