Microsoft Excel Remote Code Execution Vulnerability

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the august-15-2023 advisory.

  - Microsoft Office Remote Code Execution Vulnerability (CVE-2023-35371)

  - Microsoft Excel Remote Code Execution Vulnerability (CVE-2023-36896)

  - Microsoft Outlook Remote Code Execution Vulnerability (CVE-2023-36895)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities:

  - Microsoft Office is affected by a remote code execution vulnerability. (CVE-2023-35371)

  - Microsoft Excel is affected by a remote code execution vulnerability. (CVE-2023-36896)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Excel Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows:

  - Two remote code execution vulnerabilities. (CVE-2023-36896, CVE-2023-35371)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Excel Products are missing a security update.
It is, therefore, affected by the following vulnerability:

  - A remote code execution vulnerability. An attacker can     exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2023-36896)

ID	Name	Product	Family	Type	Severity
179875	Security Updates for Microsoft Office Products (Aug 2023) (macOS)	Nessus	MacOS X Local Security Checks	Local	high
179615	Security Updates for Microsoft Office Online Server (August 2023)	Nessus	Windows : Microsoft Bulletins	Local	high
179613	Security Updates for Microsoft Excel Products C2R (August 2023)	Nessus	Windows	Local	high
179490	Security Updates for Microsoft Excel Products (August 2023)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2023-36896

high

Tenable Plugins

high

high

high

high