Home Microsoft CVE-2023-36565
Back to Microsoft

CVE-2023-36565

Microsoft Office - Graphics Component

Microsoft CVSS 7 Updated May 29, 2026

Executive Risk Summary

"A vulnerability in Microsoft Office Graphics could allow an attacker to elevate privileges on a vulnerable system. This vulnerability can be exploited by an attacker to gain elevated access to sensitive data and systems."

Anticipated Attack Path

  1. 1. Initial Exploitation: Attacker sends a maliciously crafted file to the victim
  2. 2. Privilege Escalation: Vulnerability in Microsoft Office Graphics component is exploited
  3. 3. Post-Exploitation: Attacker gains elevated access to the system

Am I Vulnerable?

  • Verify if Microsoft Office is installed and up-to-date
  • Check for any suspicious files or activity related to the Microsoft Office Graphics component
  • Apply the latest security patches and updates for Microsoft Office

Operational Audit Arsenal

Target Type Process
Target Asset winword.exe
Standard Path C:\Program Files\Microsoft Office\Root\Office16
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: winword.exe (Process)
$Targets = 'winword.exe'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Unlikely

Minimal disruption expected, as the patch only updates the Microsoft Office Graphics component

Internal Work Notes

Elevation of Privilege vulnerability in Microsoft Office Graphics component, requiring immediate patching to prevent potential privilege escalation attacks.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Microsoft Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.