CVE-2023-21715: Microsoft Office Publisher Security Feature Bypass Vulnerability

High severity, CVSS 7.3. Actively exploited: in CISA KEV since 2023-02-14. EPSS: 12% chance of exploitation in the next 30 days.

Microsoft Publisher Security Feature Bypass Vulnerability

Affected products

• Microsoft 365 Apps: affected versions not specified

Published 2023-02-14. Last modified 2026-08-19.