CVE

CVE-2023-21715

Microsoft Office Publisher Security Feature Bypass Vulnerability

Microsoft · Office

Date added (CISA)

2023-02-14

Remediation due

2023-03-07

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system.