CVE-2023-28285

Description

References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28285 · Patch
• packetstormsecurity.com/files/173127/Microsoft-Office-Remote-Code-Execution.html
• packetstormsecurity.com/files/173140/Microsoft-365-MSO-2305-Build-16.0.16501.20074-Remote-Code-Execution.html

office의 다른 취약점

• CVE-2026-70105높음 7.5Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-55054보통 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-47293높음 7.0Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
• CVE-2026-42832보통 5.5Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-42831높음 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.