CVE-2023-36413

—

CVSS 3.1

6.5 medium

EPSS

30%p98

Published

Nov 14, 2023 (Nov 14, 2023)

Modified

Jun 17, 2026

Description

Microsoft Office Security Feature Bypass Vulnerability

Vendors: microsoft
Products: 365 apps, office, office long term servicing channel
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (30.0%)

In the news3 stories

Microsoft Fixes Five Zero

Infosecurity MagazineNov 15, 10:00 UTC · Nov 15, 2023Exploit / PoC in the wildCVE-2023-36036 CVE-2023-36033 CVE-2023-36025+2 CVEs

60

Microsoft Patch Tuesday, November 2023 Edition

Krebs on SecurityNov 15, 00:00 UTC · Nov 15, 2023Vulnerability in the wildCVE-2023-36025 CVE-2023-36033 CVE-2023-36036+6 CVEs1

60

Alert: Microsoft Releases Patch Updates for 5 New Zero

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2023Vulnerability in the wildCVE-2023-36025 CVE-2023-36033 CVE-2023-36036+9 CVEs

60