Firetruck

CVE-2023-21715

KEV
Updated Aug 19, 2026 · PUBLISHED
View KEV entry →

Description

Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Microsoft 365 Apps for EnterpriseMicrosoft / Microsoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleasesaffected