CVE-2023-33157

Vulnerability updated 5 months ago (2024-05-04T17:34:09.587Z)
Download STIX
Preview STIX
CVE-2023-33157 is a critical vulnerability that affects the on-premises SharePoint Server. This flaw in software design or implementation can potentially lead to information leaks. However, for an attacker to exploit this vulnerability, they must already possess elevated privileges. Alongside CVE-2023-33157, another critical-rated vulnerability, CVE-2023-33160, also impacts the SharePoint Server. These vulnerabilities were part of a set of updates released by Microsoft, which included two other bugs rated as "important" - CVE-2023-33134 and CVE-2023-33159. Despite the presence of these significant vulnerabilities, the most pressing issue was identified as CVE-2023-36884, an Office and HTML Remote Code Execution (RCE) Vulnerability. In total, Microsoft released 14 updates rated important and two critical-rated updates for SharePoint. To address these vulnerabilities, particularly the critical ones like CVE-2023-33157 and CVE-2023-33160, users are advised to apply the necessary patches and updates as soon as possible. The potential for information leakage from the SharePoint Server underscores the urgency to rectify these issues promptly. It's also crucial to maintain a secure system with appropriate user privilege levels to reduce the chances of exploitation.
Description last updated: 2024-05-04T17:25:33.303Z
What's your take? (Question 1 of 1)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Microsoft
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Associated Vulnerabilities
To see the evidence that has resulted in these vulnerability associations, create a free account
Alias DescriptionAssociation TypeVotes
The vulnerability CVE-2023-33160 is associated with CVE-2023-33157. Unspecified
2