CVE-2023-36866: Microsoft Office Visio Remote Code Execution Vulnerability
Published Aug 8, 2023
·Updated
Microsoft Office Visio Remote Code Execution Vulnerability
Affected Software
17 affected componentsFixes available
Microsoft Office 2019 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps
Microsoft Office=2019
Microsoft Office Long Term Servicing Channel=2021
Microsoft Visio 2016<5439.1000
5439.1000
Microsoft Office 2019 for 64-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC 2021 for 32-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft 365 Apps for Enterprise<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft 365 Apps for Enterprise<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office LTSC 2021 for 64-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Office 2019 for 32-bit editions<https://aka.ms/OfficeSecurityReleases
https://aka.ms/OfficeSecurityReleases
Microsoft Visio 2016<5439.1000
5439.1000
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5439.1000Patch KB5002565 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases
Event History
Aug 8, 2023
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
CVE Published
via MITRE·05:08 PM
Data Sourced
via MITRE·05:08 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-36866?
CVE-2023-36866 is a vulnerability in Microsoft Office Visio that allows remote code execution.
2
How severe is CVE-2023-36866?
CVE-2023-36866 has a severity rating of 7.8 (high).
3
Which software versions are affected by CVE-2023-36866?
CVE-2023-36866 affects Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, and Microsoft Office 2019.
4
How can I fix CVE-2023-36866?
To fix CVE-2023-36866, update your software to the latest version.
5
Where can I find more information about CVE-2023-36866?
You can find more information about CVE-2023-36866 on the Microsoft Security Response Center website.