Vulnerability
Microsoft Word Information Disclosure Vulnerability
Microsoft Word contains an unspecified vulnerability that allows for information disclosure.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA description: “Microsoft Word contains an unspecified vulnerability that allows for information disclosure.”
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NMid-pack — moderate exploitation likelihood.
No VEX statements published for CVE-2023-36761. Vendors publish VEX (Vulnerability Exploitability eXchange) to assert per-product whether a CVE is actually exploitable in their distribution.
Active exploitation with limited impact — coordinate patching