CVE-2023-36761
Microsoft Word Information Disclosure Vulnerability
Published Sep 12, 2023 · updated Jun 16, 2026 · microsoft 365 apps
Microsoft Word contains an unspecified vulnerability that allows for information disclosure.
Timeline
Detection, updates, and resolution for this record.
Sep 12, 2023 · Catalog
Detected
Microsoft Word contains an unspecified vulnerability that allows for information disclosure.
Sep 12, 2023 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Oct 3, 2023 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
Microsoft Word contains an unspecified vulnerability that allows for information disclosure.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Oct 3, 2023
Affected
- cpe microsoft/365 appsversion unspecified
- cpe microsoft/office2019
- cpe microsoft/office long term servicing channel2021
- cpe microsoft/word2013
- vendor Microsoft Wordversion unspecified
Sources
- CISA KEVCVE-2023-36761
Microsoft Word contains an unspecified vulnerability that allows for information disclosure.
cisa.gov - CVE.orgCVE-2023-36761
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-36761
30-day exploitation probability 19.6%
first.org - NIST NVDCVE-2023-36761
Microsoft Word Information Disclosure Vulnerability
nvd.nist.gov