CVE-2023-21716

—1

CVSS 3.1

9.8 critical

EPSS

82%p100

Published

Feb 14, 2023 (Feb 14, 2023)

Modified

Aug 19, 2026

Description

Microsoft Word Remote Code Execution Vulnerability

Vendors: microsoft
Products: office, office long term servicing channel, office online server, office web apps, sharepoint enterprise server, sharepoint foundation, sharepoint server, word
Weakness: CWE-190
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (82.3%)

In the news6 stories

Week in review: Public MS Word RCE PoC, API exploitation, Patch Tuesday forecast

Help Net SecurityMar 12, 00:00 UTC · Mar 12, 2023Exploit / PoC CVE-2023-27532 CVE-2023-25610 CVE-2023-217161

60

Expert released PoC code for critical Microsoft Word RCE flaw

Security AffairsMar 7, 15:04 UTC · Mar 7, 2023Exploit / PoC CVE-2023-217162

60

PoC exploit for recently patched Microsoft Word RCE is public (CVE-2023-21716)

Help Net SecurityMar 6, 00:00 UTC · Mar 6, 2023Exploit / PoC CVE-2023-217161

60

Microsoft Patch Tuesday for February 2023 — Snort rules and prominent vulnerabilities

Cisco TalosFeb 15, 23:15 UTC · Feb 15, 2023Vulnerability CVE-2023-21823 CVE-2023-21715 CVE-2023-23376+11 CVEs

60

Microsoft Patch Tuesday, February 2023 Edition

Krebs on SecurityFeb 15, 00:00 UTC · Feb 15, 2023Vulnerability CVE-2023-23376 CVE-2023-21715 CVE-2023-21823+4 CVEs

60

Microsoft patches three exploited zero-days (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823)

Help Net SecurityFeb 14, 00:00 UTC · Feb 14, 2023Exploit / PoC in the wildCVE-2023-21715 CVE-2023-23376 CVE-2023-21823+1 CVEs1

60