CVE-2023-21715

CVE-2023-21715 is a high-severity security feature bypass vulnerability affecting Microsoft Publisher within Microsoft 365 Apps. This flaw allows an attacker, with local access and user interaction, to bypass security features, potentially leading to high impact on confidentiality, integrity, and availability. Notably, this vulnerability is actively exploited in the wild, as confirmed by its presence on CISA's KEV catalog. Despite active exploitation, no public exploit code is currently available on platforms like Metasploit or ExploitDB, though it has garnered significant community discussion and media coverage.