CVE-2021-38653
Description
Microsoft Office Visio Remote Code Execution Vulnerability
Risk Information
Base Score
7.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
8.194
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Office 2019 for x86 1808 of version(10378.20029) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Office 2019 for x64 1808 of version(10378.20029) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Office 2019 for 1808 of Volume License Version (10378.20029) (Online Installer) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2102 of version(13801.20960) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2102 of version(13801.20960) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Semi Annual Channel for x64 2102 of version(13801.20960) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Semi Annual Channel for x86 2102 of version(13801.20960) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi-Annual Channel Version 2102 (Build 13801.20960) (Online Installer) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel for x64 2108 of version(14326.20404) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel for x86 2108 of version(14326.20404) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Current Channel for x64 2108 of version(14326.20404) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Current Channel for x86 2108 of version(14326.20404) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x64 2108 of version(14326.20404) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x86 2108 of version(14326.20404) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel Version 2108 (Build 14326.20404) (Online Installer) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Targeted Channel Version 2108 (Build 14326.20404) (Online Installer) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Office 2019 for 2108 Retail Version (14326.20404) (Online Installer) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Office 2019 for x64 2108 Retail Version (14326.20404) | Windows |
| Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability for Office 2019 for x86 2108 Retail Version (14326.20404) | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-32119 | Update for Office 2019 for x86 1808 of version(10378.20029) |
| PATCH-32121 | Update for Office 2019 for x64 1808 of version(10378.20029) |
| PATCH-32137 | Update for Office 2019 for 1808 of Volume License Version (10378.20029) (Online Installer) |
| PATCH-32123 | Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2102 of version(13801.20960) |
| PATCH-32125 | Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2102 of version(13801.20960) |
| PATCH-32127 | Update for Microsoft 365 Apps for Business Semi Annual Channel for x64 2102 of version(13801.20960) |
| PATCH-32129 | Update for Microsoft 365 Apps for Business Semi Annual Channel for x86 2102 of version(13801.20960) |
| PATCH-32135 | Update for Microsoft 365 Apps for Enterprise Semi-Annual Channel Version 2102 (Build 13801.20960) (Online Installer) |
| PATCH-32111 | Update for Microsoft 365 Apps for Enterprise Current Channel for x64 2108 of version(14326.20404) |
| PATCH-32113 | Update for Microsoft 365 Apps for Enterprise Current Channel for x86 2108 of version(14326.20404) |
| PATCH-32115 | Update for Microsoft 365 Apps for Business Current Channel for x64 2108 of version(14326.20404) |
| PATCH-32117 | Update for Microsoft 365 Apps for Business Current Channel for x86 2108 of version(14326.20404) |
| PATCH-32131 | Update for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x64 2108 of version(14326.20404) |
| PATCH-32133 | Update for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x86 2108 of version(14326.20404) |
| PATCH-32134 | Update for Microsoft 365 Apps for Enterprise Current Channel Version 2108 (Build 14326.20404) (Online Installer) |
| PATCH-32136 | Update for Microsoft 365 Apps for Enterprise Targeted Channel Version 2108 (Build 14326.20404) (Online Installer) |
| PATCH-32138 | Update for Office 2019 for 2108 Retail Version (14326.20404) (Online Installer) |
| PATCH-32140 | Update for Office 2019 for x64 2108 Retail Version (14326.20404) |
| PATCH-32142 | Update for Office 2019 for x86 2108 Retail Version (14326.20404) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234