CVE-2021-1716

Description

Microsoft Word Remote Code Execution Vulnerability

Risk Information

Base Score
7.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
5.513

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Word Remote Code Execution Vulnerability for Microsoft Word 2010 (KB4493145) 32-Bit EditionWindows
Microsoft Word Remote Code Execution Vulnerability for Microsoft Word 2010 (KB4493145) 64-Bit EditionWindows
Microsoft Word Remote Code Execution Vulnerability for Microsoft SharePoint Enterprise Server 2013 (KB4486683)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft SharePoint Enterprise Server 2016 (KB4493163)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft Office Web Apps Server 2013 (KB4493171)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft SharePoint Server 2010 (KB4493178)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft Web Applications (KB4493183)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft Office 2010 (KB4493142) 32-Bit EditionWindows
Microsoft Word Remote Code Execution Vulnerability for Microsoft Office 2010 (KB4493142) 64-Bit EditionWindows
Microsoft Word Remote Code Execution Vulnerability for Microsoft Word 2013 (KB4486764) 32-Bit EditionWindows
Microsoft Word Remote Code Execution Vulnerability for Microsoft Word 2013 (KB4486764) 64-Bit EditionWindows
Microsoft Word Remote Code Execution Vulnerability for Microsoft Word 2016 (KB4493156) 32-Bit EditionWindows
Microsoft Word Remote Code Execution Vulnerability for Microsoft Word 2016 (KB4493156) 64-Bit EditionWindows
Microsoft Word Remote Code Execution Vulnerability for Microsoft SharePoint Enterprise Server 2016 (KB4493167)Windows
Microsoft Word Remote Code Execution Vulnerability for Office 2019 for x86 1808 of version(10370.20052)Windows
Microsoft Word Remote Code Execution Vulnerability for Office 2019 x64 1808 (Build:10370.20052)Windows
Microsoft Word Remote Code Execution Vulnerability for Office 2019 for x64 1808 of version(10370.20052)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Semi Annual Channel for x64 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Semi Annual Channel for x86 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x64 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x86 2008 of version(13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi-Annual Channel Version 2008 (Build 13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Targeted Channel Version 2008 (Build 13127.21064)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel for x64 2012 of version(13530.20376)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel for x86 2012 of version(13530.20376)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Current Channel for x64 2012 of version(13530.20376)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Current Channel for x86 2012 of version(13530.20376)Windows
Microsoft Word Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel Version 2012 (Build 13530.20376)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-30670Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4486683)
PATCH-30674Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4493163)
PATCH-30673Security Update for Microsoft Office Web Apps Server 2013 (KB4493171)
PATCH-30656Security Update for Microsoft Office 2010 (KB4493142) 32-Bit Edition
PATCH-30657Security Update for Microsoft Office 2010 (KB4493142) 64-Bit Edition
PATCH-30671Security Update for Microsoft Word 2013 (KB4486764) 32-Bit Edition
PATCH-30672Security Update for Microsoft Word 2013 (KB4486764) 64-Bit Edition
PATCH-30681Security Update for Microsoft Word 2016 (KB4493156) 32-Bit Edition
PATCH-30682Security Update for Microsoft Word 2016 (KB4493156) 64-Bit Edition
PATCH-30720Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4493167)
PATCH-30695Update for Office 2019 for x86 1808 of version(10370.20052)
PATCH-30696Office 2016 Deployment Tool for Office 2019 x64 1808 (Build:10370.20052)
PATCH-30697Update for Office 2019 for x64 1808 of version(10370.20052)
PATCH-30699Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2008 of version(13127.21064)
PATCH-30701Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2008 of version(13127.21064)
PATCH-30703Update for Microsoft 365 Apps for Business Semi Annual Channel for x64 2008 of version(13127.21064)
PATCH-30705Update for Microsoft 365 Apps for Business Semi Annual Channel for x86 2008 of version(13127.21064)
PATCH-30707Update for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x64 2008 of version(13127.21064)
PATCH-30709Update for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x86 2008 of version(13127.21064)
PATCH-30711Update for Microsoft 365 Apps for Enterprise Semi-Annual Channel Version 2008 (Build 13127.21064)
PATCH-30712Update for Microsoft 365 Apps for Enterprise Targeted Channel Version 2008 (Build 13127.21064)
PATCH-30687Update for Microsoft 365 Apps for Enterprise Current Channel for x64 2012 of version(13530.20376)
PATCH-30689Update for Microsoft 365 Apps for Enterprise Current Channel for x86 2012 of version(13530.20376)
PATCH-30691Update for Microsoft 365 Apps for Business Current Channel for x64 2012 of version(13530.20376)
PATCH-30693Update for Microsoft 365 Apps for Business Current Channel for x86 2012 of version(13530.20376)
PATCH-30710Update for Microsoft 365 Apps for Enterprise Current Channel Version 2012 (Build 13530.20376)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234