Discovery of the CVE-2023-36884 vulnerability in Microsoft Windows and Office

On Tuesday July 11, 2023, Microsoft announced the existence of a vulnerability referenced CVE-2023-36884 in several versions of Windows and Office products.

CVE-2023-36884, vulnerability in Microsoft Windows and Office. Photo: Raysonho/Wikipedia

Microsoft, the publisher of the affected products, confirms that the vulnerability has been actively exploited in a targeted manner.

No fix is currently available but mitigations have been proposed.

The CVE-2023-36884 vulnerability allows an attacker to execute arbitrary code remotely in the user context using a Microsoft Office document.

In less technical terms, a security issue with Microsoft Office products allows an attacker to remotely execute code in a device, through a specially crafted and previously transmitted document using social engineering technique .

An attacker could create a specially crafted Microsoft Office document that would allow him to remotely execute code on the victim's device, however, the attacker would have to convince the victim to open the malicious file.

YOU MAY ALSO LIKE

Clean, sustainable fuels made ‘from thin air’ and plastic waste

Researchers have demonstrated how carbon dioxide can be captured from industrial processes – or even directly from the air – and transformed into clean, sustainable fuels using just the energy from the sun.

Turning pine needles from fire risk to renewable fuel

The flammability of pine needles, a major fire hazard in the coniferous forests, makes them an abundant source of renewable energy, say researchers.

New Zinc Battery Offers Efficient, Safe Alternative to Lithium-ion Batteries

Researchers have made a groundbreaking discovery in battery technology, finding a way to create an efficient battery using zinc, a readily available and inexpensive metal, instead of the rare metals typically used in lithium batteries.

'Magnificent' feathers reveal nature-inspired method to hold and store liquids

Bird with uncanny ability to hold water while it flies could inspire the next generation of absorbent materials.

Quantum 'shock absorbers' allow perovskite to exhibit superfluorescence at room temperature

Understanding how this mechanism works could lead to quantum devices that do not need cooling to operate.

New material for computer chips could reduce energy consumption

Research aims to help semiconductor industry make computing less of an energy hog.