Skip to content
CVE Tracker
Back

CVE-2023-23398

Microsoft Excel Spoofing Vulnerability

High7.1EPSS 0.62%
Published
Updated
Reserved
Assigned by
microsoft

Description

Microsoft Excel Spoofing Vulnerability

Scores

CVSS scores of CVE-2023-23398, by who scored it
Scored byCVSSScoreVector
microsoftCNA (assigner)3.1High7.1CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
NVDNVD · Modified3.1High7.1CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS (exploitation in 30 days)
0.62% · top 50% of all CVEs (3 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.

Weakness

Affected products

  • Microsoft · Microsoft Office 2019

    • affected 19.0.0 – < https://aka.ms/OfficeSecurityReleases

  • Microsoft · Microsoft 365 Apps for Enterprise

    • affected 16.0.1 – < https://aka.ms/OfficeSecurityReleases

  • Microsoft · Microsoft Office LTSC 2021

    • affected 16.0.1 – < https://aka.ms/OfficeSecurityReleases

  • Microsoft · Microsoft Excel 2016

    • affected 16.0.0.0 – < 16.0.5387.1000

  • Microsoft · Microsoft Excel 2013 Service Pack 1

    • affected 15.0.0.0 – < 15.0.5537.1000

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .