CVE-2023-36866: Microsoft Office Visio Remote Code Execution Vulnerability
Published Aug 8, 2023
·Updated
Microsoft Office Visio Remote Code Execution Vulnerability
Affected Software
11 affected componentsFixes available
Microsoft Visio 2016
Microsoft Visio 2016
Microsoft Office 2019 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps
Microsoft Office=2019
Microsoft Office Long Term Servicing Channel=2021
Remediation
Event History
Aug 8, 2023
CVE Published
07:00 AM
Data Sourced
07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:08 PM
Data Sourced
via MITRE·05:08 PM
DescriptionSeverity
Frequently Asked Questions
1
What is CVE-2023-36866?
CVE-2023-36866 is a vulnerability in Microsoft Office Visio that allows remote code execution.
2
How severe is CVE-2023-36866?
CVE-2023-36866 has a severity rating of 7.8 (high).
3
Which software versions are affected by CVE-2023-36866?
CVE-2023-36866 affects Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, and Microsoft Office 2019.
4
How can I fix CVE-2023-36866?
To fix CVE-2023-36866, update your software to the latest version.
5
Where can I find more information about CVE-2023-36866?
You can find more information about CVE-2023-36866 on the Microsoft Security Response Center website.