{"schemaVersion":3,"id":"CVE-2023-21716","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Microsoft Word Remote Code Execution Vulnerability","dates":{"published":"2023-02-14T19:33:45.678Z","modified":"2026-08-19T16:27:13.223Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.848,"percentile":0.99709,"severity":"critical","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":2.498,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.82302},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.848,"percentile":0.99709}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.82302,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.848,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.848,"percentile":0.99709}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"microsoft","product":"microsoft 365 apps for enterprise","name":"Microsoft 365 Apps for Enterprise","label":"microsoft 365 apps for enterprise","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_365_apps_for_enterprise"},{"vendor":"microsoft","product":"microsoft office 2019","name":"Microsoft Office 2019","label":"microsoft office 2019","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_2019"},{"vendor":"microsoft","product":"microsoft office 2019 for mac","name":"Microsoft Office 2019 for Mac","label":"microsoft office 2019 for mac","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.0, < 16.70.23021201","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.0, < 16.70.23021201","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_2019_for_mac"},{"vendor":"microsoft","product":"microsoft office ltsc 2021","name":"Microsoft Office LTSC 2021","label":"microsoft office ltsc 2021","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_ltsc_2021"},{"vendor":"microsoft","product":"microsoft office ltsc for mac 2021","name":"Microsoft Office LTSC for Mac 2021","label":"microsoft office ltsc for mac 2021","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < 16.70.23021201","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < 16.70.23021201","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_ltsc_for_mac_2021"},{"vendor":"microsoft","product":"microsoft office online server","name":"Microsoft Office Online Server","label":"microsoft office online server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < 16.0.10395.20001","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < 16.0.10395.20001","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_online_server"},{"vendor":"microsoft","product":"microsoft office web apps server 2013 service pack 1","name":"Microsoft Office Web Apps Server 2013 Service Pack 1","label":"microsoft office web apps server 2013 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 15.0.1, < 15.0.5529.1000","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 15.0.1, < 15.0.5529.1000","eol":null,"hubHref":"/vendor/microsoft/microsoft_office_web_apps_server_2013_service_pack_1"},{"vendor":"microsoft","product":"microsoft sharepoint enterprise server 2013 service pack 1","name":"Microsoft SharePoint Enterprise Server 2013 Service Pack 1","label":"microsoft sharepoint enterprise server 2013 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 15.0.0, < 15.0.5529.1000","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 15.0.0, < 15.0.5529.1000","eol":null,"hubHref":"/vendor/microsoft/microsoft_sharepoint_enterprise_server_2013_service_pack_1"},{"vendor":"microsoft","product":"microsoft sharepoint enterprise server 2016","name":"Microsoft SharePoint Enterprise Server 2016","label":"microsoft sharepoint enterprise server 2016","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.0, < 16.0.5383.1000","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.0, < 16.0.5383.1000","eol":null,"hubHref":"/vendor/microsoft/microsoft_sharepoint_enterprise_server_2016"},{"vendor":"microsoft","product":"microsoft sharepoint foundation 2013 service pack 1","name":"Microsoft SharePoint Foundation 2013 Service Pack 1","label":"microsoft sharepoint foundation 2013 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 15.0.0, < 15.0.5529.1000","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 15.0.0, < 15.0.5529.1000","eol":null,"hubHref":"/vendor/microsoft/microsoft_sharepoint_foundation_2013_service_pack_1"},{"vendor":"microsoft","product":"microsoft sharepoint server 2019","name":"Microsoft SharePoint Server 2019","label":"microsoft sharepoint server 2019","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.0, < 16.0.10395.20001","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.0, < 16.0.10395.20001","eol":null,"hubHref":"/vendor/microsoft/microsoft_sharepoint_server_2019"},{"vendor":"microsoft","product":"microsoft sharepoint server subscription edition","name":"Microsoft SharePoint Server Subscription Edition","label":"microsoft sharepoint server subscription edition","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.0, < 16.0.15601.20478","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.0, < 16.0.15601.20478","eol":null,"hubHref":"/vendor/microsoft/microsoft_sharepoint_server_subscription_edition"},{"vendor":"microsoft","product":"microsoft word 2013 service pack 1","name":"Microsoft Word 2013 Service Pack 1","label":"microsoft word 2013 service pack 1","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 15.0.1, < 15.0.5529.1000","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 15.0.1, < 15.0.5529.1000","eol":null,"hubHref":"/vendor/microsoft/microsoft_word_2013_service_pack_1"},{"vendor":"microsoft","product":"microsoft word 2016","name":"Microsoft Word 2016","label":"microsoft word 2016","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.1, < 16.0.5383.1000","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.1, < 16.0.5383.1000","eol":null,"hubHref":"/vendor/microsoft/microsoft_word_2016"},{"vendor":"microsoft","product":"office","name":"Office","label":"office","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2019","noFixRecorded":false,"fixedIn":null}],"versionsText":"2019","eol":{"isEol":true,"eolDate":"2025-10-14T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"2019","label":"2019","eolFrom":"2025-10-14T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"office","label":"Microsoft Office","category":"app"}},"hubHref":"/vendor/microsoft/office"},{"vendor":"microsoft","product":"office_long_term_servicing_channel","name":"office long term servicing channel","label":"office_long_term_servicing_channel","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2021","noFixRecorded":false,"fixedIn":null}],"versionsText":"2021","eol":null,"hubHref":"/vendor/microsoft/office_long_term_servicing_channel"},{"vendor":"microsoft","product":"office online server","name":"Office Online Server","label":"office online server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2016","noFixRecorded":false,"fixedIn":null}],"versionsText":"2016","eol":null,"hubHref":"/vendor/microsoft/office_online_server"},{"vendor":"microsoft","product":"office_web_apps","name":"office web apps","label":"office_web_apps","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"2013:sp1","eol":null,"hubHref":"/vendor/microsoft/office_web_apps"},{"vendor":"microsoft","product":"sharepoint_enterprise_server","name":"sharepoint enterprise server","label":"sharepoint_enterprise_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null},{"text":"2016","noFixRecorded":false,"fixedIn":null}],"versionsText":"2013:sp1 | 2016","eol":null,"hubHref":"/vendor/microsoft/sharepoint_enterprise_server"},{"vendor":"microsoft","product":"sharepoint_foundation","name":"sharepoint foundation","label":"sharepoint_foundation","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"2013:sp1","eol":null,"hubHref":"/vendor/microsoft/sharepoint_foundation"},{"vendor":"microsoft","product":"sharepoint_server","name":"sharepoint server","label":"sharepoint_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"2019","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | 2019","eol":null,"hubHref":"/vendor/microsoft/sharepoint_server"},{"vendor":"microsoft","product":"sharepoint server subscription edition language pack","name":"SharePoint Server Subscription Edition Language Pack","label":"sharepoint server subscription edition language pack","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 16.0.0, < 16.0.15601.20478","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 16.0.0, < 16.0.15601.20478","eol":null,"hubHref":"/vendor/microsoft/sharepoint_server_subscription_edition_language_pack"},{"vendor":"microsoft","product":"word","name":"Word","label":"word","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2013:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"2013:sp1","eol":null,"hubHref":"/vendor/microsoft/word"}],"affectedCount":23,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21716","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21716","hostname":"msrc.microsoft.com","tags":["Vendor Advisory","Patch"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2023-02-14T19:33:45.678Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-19T16:27:13.223Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T01:13:20.901Z","stale":false,"partial":false}}