CVE-2023-36884 mitigations and effects on Office apps functionality? - eviltoast
This is an automated archive.

The original was posted on /r/sysadmin by /u/Real_Lemon8789 on 2023-08-06 19:27:11+00:00.


Please note that while these registry settings would mitigate exploitation of this issue, it could affect regular functionality for certain use cases related to these applications. For this reason, we suggest testing. To disable the mitigation, delete the registry key or set it to “0”.

What “regular functionality?”

“Testing” what specifically?

Does it disable any features in Wordpad?

What, specifically might break by applying these registry keys or “Block all Office applications from creating child processes” and how do you verify nothing is going to break?

August updates are due in two days. Is a patch expected by then that would make applying these mitigations moot?