Micropatches Released For Remote Code Execution in Windows OLE (CVE-2023-29325)

May 2023 Windows Updates brought a fix for CVE-2023-29325,
a remote code execution vulnerability in Microsoft OLE (Object Linking and Embedding). The vulnerability was reported to Microsoft by Will Dormann with Vul Labs.

Will found that two of the many COM objects installed on every Windows system by default merely have to be referenced by their respective CLSIDs in a rich text email for Outlook to experience an access violation exception.

There is almost no public information on what …

code code execution cve cve-2023-29325 default fix labs may may 2023 microsoft object ole remote code remote code execution system updates vulnerability will dormann windows windows updates