NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability3 · 1 read

CVE-2023-21716

CVSS 3.1: 9.8 critical
EPSS: 82%p100
Published: Feb 14, 2023 · Feb 14, 2023
Modified: Aug 19, 2026

Analyze CVE-2023-21716 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Word Remote Code Execution Vulnerability

Vendors: microsoft

Products: office, office long term servicing channel, office online server, office web apps, sharepoint enterprise server, sharepoint foundation, sharepoint server, word

Weakness: CWE-190

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (82.3%)

In the news

6 stories

Week in review: Public MS Word RCE PoC, API exploitation, Patch Tuesday forecast

Help Net SecurityMar 12, 00:00 UTC · Mar 12, 2023Exploit / PoCCVE-2023-27532 CVE-2023-25610 CVE-2023-217163

60

Expert released PoC code for critical Microsoft Word RCE flaw

Security AffairsMar 7, 15:04 UTC · Mar 7, 2023Exploit / PoCCVE-2023-217165 · 1 read

60

PoC exploit for recently patched Microsoft Word RCE is public (CVE-2023-21716)

Help Net SecurityMar 6, 00:00 UTC · Mar 6, 2023Exploit / PoCCVE-2023-217164 · 1 read

60

Microsoft Patch Tuesday for February 2023 — Snort rules and prominent vulnerabilities

Cisco TalosFeb 15, 23:15 UTC · Feb 15, 2023VulnerabilityCVE-2023-21823 CVE-2023-21715 CVE-2023-23376+112 · 1 read

60

Microsoft Patch Tuesday, February 2023 Edition

Krebs on SecurityFeb 15, 00:00 UTC · Feb 15, 2023VulnerabilityCVE-2023-23376 CVE-2023-21715 CVE-2023-21823+4

60

Microsoft patches three exploited zero-days (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823)

Help Net SecurityFeb 14, 00:00 UTC · Feb 14, 2023Exploit / PoCExploitedCVE-2023-21715 CVE-2023-23376 CVE-2023-21823+13 · 1 read

60