« Volver al listado

CVE-2023-21741

Estado: ModificadaAlta (7.1)—

Microsoft Office Visio Information Disclosure Vulnerability

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Microsoft — 365 AppsMicrosoft — OfficeMicrosoft — Office Long Term Servicing ChannelMicrosoft — Visio

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-21741",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "secure@microsoft.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "Microsoft",
          "product": "Microsoft Office LTSC 2021",
          "versions": [
            {
              "status": "affected",
              "version": "16.0.1",
              "lessThan": "https://aka.ms/OfficeSecurityReleases",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems",
            "32-bit Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Visio 2013 Service Pack 1",
          "versions": [
            {
              "status": "affected",
              "version": "15.0.1",
              "lessThan": "15.0.5519.1000",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Visio 2013 Service Pack 1",
          "versions": [
            {
              "status": "affected",
              "version": "15.0.1",
              "lessThan": "15.0.5519.1000",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "32-bit Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft 365 Apps for Enterprise",
          "versions": [
            {
              "status": "affected",
              "version": "16.0.1",
              "lessThan": "https://aka.ms/OfficeSecurityReleases",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "32-bit Systems",
            "x64-based Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Office 2019",
          "versions": [
            {
              "status": "affected",
              "version": "19.0.0",
              "lessThan": "https://aka.ms/OfficeSecurityReleases",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems",
            "32-bit Systems"
          ]
        },
        {
          "vendor": "Microsoft",
          "product": "Microsoft Visio 2016",
          "versions": [
            {
              "status": "affected",
              "version": "16.0.1",
              "lessThan": "16.0.5378.1000",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "x64-based Systems",
            "32-bit Systems"
          ]
        }
      ]
    }
  ],
  "published": "2023-01-10T22:15:17.790",
  "references": [
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21741",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21741",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "secure@microsoft.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Office Visio Information Disclosure Vulnerability"
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de divulgación de información en Microsoft Office Visio"
    }
  ],
  "lastModified": "2026-06-17T05:33:50.973",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF177984-A906-43FA-BF60-298133FBBD6B"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B3EF1E5-4757-4CFA-AE72-6BA876D3C9FD"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visio:2013:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87EBA8C7-E317-4EFD-B1AA-DD6A8B0DFDCC"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:visio:2016:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89229922-0836-4CC2-AED2-107C3142D0EA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}