CVE-2023-36884

Name of the Vulnerable Software and Affected Versions Microsoft Windows (affected versions not specified) Microsoft Office (affected versions not specified)

Description An issue exists in the way Windows Search and Microsoft Office process input data, specifically related to HTML. A remote attacker can execute arbitrary code on a system by inducing a user to open a specially crafted malicious Microsoft Office document. This flaw allows for a Mark-of-the-Web (MotW) bypass, enabling the planting of files without the MotW security attribute using Windows Search.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.