Cyber Resilience

CVE-2023-36037

Microsoft Office Long Term Servicing Channel 2021

Published
14 November 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.012 64th percentile
Risk Priority 59 floored blend · peak EPSS

Summary

CVE-2023-36037 is a high-severity an unspecified weakness vulnerability in Microsoft Office Long Term Servicing Channel. Its CVSS base score is 7.8 (High).

Operationally, ranked in the top 36% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Microsoft Excel Security Feature Bypass Vulnerability

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2024-49029Same product: Microsoft 365 Apps
CVE-2023-36041Same product: Microsoft 365 Apps
CVE-2024-49028Same product: Microsoft 365 Apps
CVE-2024-49027Same product: Microsoft 365 Apps
CVE-2021-42292Same product: Microsoft 365 Apps
CVE-2024-49069Same product: Microsoft 365 Apps
CVE-2024-49030Same product: Microsoft 365 Apps
CVE-2024-43504Same product: Microsoft 365 Apps
CVE-2023-23398Same product: Microsoft 365 Apps
CVE-2024-49026Same product: Microsoft 365 Apps

Affected Assets

microsoft
365 apps
all versions
microsoft
excel
2016
microsoft
office
2019
microsoft
office long term servicing channel
2021

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References