What is CVE-2023-29325?

CVE-2023-29325 is a critical remote code execution vulnerability affecting various versions of Microsoft Windows operating systems and Windows Server. This vulnerability, found in Windows OLE (Object Linking and Embedding), allows an attacker to execute arbitrary code on the affected system. Both 32-bit and 64-bit systems, as well as ARM64-based systems and Server Core installations, are impacted by this high-severity issue.

Who is impacted by CVE-2023-29325?

Impacted systems include Windows 10 (versions 1507, 1607, 1809, 20H2, 21H2, and 22H2), Windows 11 (versions 21H2 and 22H2), and Windows Server (2008, 2008 R2 SP1, 2012, 2012 R2, 2016, and 2022). Both 32-bit and 64-bit systems, as well as ARM64-based systems and Server Core installations, are affected by this issue.

What should I do if I’m affected?

If you're affected by the CVE-2023-29325 vulnerability, it's crucial to take action to protect your system. Follow these steps to mitigate the risk:

1. Install the appropriate security updates for your Windows version and server edition, as recommended by Microsoft.

2. Configure Microsoft Outlook to read all standard mail in plain text, reducing the risk of opening malicious RTF files.

3. Stay informed about updates related to this vulnerability by regularly checking the National Vulnerability Database and the CVE record.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The Windows OLE Remote Code Execution Vulnerability (CVE-2023-29325) is not listed in CISA's Known Exploited Vulnerabilities Catalog. This critical vulnerability was published on May 9, 2023. To protect your system, it's essential to install the security updates provided by Microsoft and configure Microsoft Outlook to read emails in plain text format.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-416, which is a Use After Free issue in Windows OLE, affecting various Microsoft Windows operating systems and Windows Server.

Learn More

For a comprehensive understanding of its description, severity, technical details, and affected software configurations, refer to the NVD page and the sources listed below.

• Microsoft Security Update Guide

• CVE Record