Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2023-36884
HistoryJul 11, 2023 - 7:15 p.m.

CVE-2023-36884

2023-07-1119:15:09
NVD-CWE-noinfo
[email protected]
web.nvd.nist.gov
977
In Wild
23
cve-2023-36884
windows
search
remote code execution
vulnerability
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.491 Medium

EPSS

Percentile

97.5%

JSON

Windows Search Remote Code Execution Vulnerability

VendorProductVersionCPE
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoftwindows_10_21h2*cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
microsoftwindows_11_22h2*cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 231

Social References

More

Related

openvas 19
mscve 2
mmpc 1
hivepro 1
githubexploit 6
prion 1
mssecure 1
nessus 13
attackerkb 1
cisa_kev 1
malwarebytes 3
thn 5
krebs 2
trellix 4
qualysblog 3
securelist 1
avleonov 2
mskb 16
kaspersky 2
rapid7blog 2
openvas
openvas
Microsoft Project 2013 Remote Code Execution Vulnerability (KB4484489)
2023-08-10 00:00:00
Microsoft Excel 2013 Service Pack 1 Defense in Depth Security Update (KB5002451)
2023-08-09 00:00:00
Microsoft Project 2016 Remote Code Execution Vulnerability (KB5002328)
2023-08-10 00:00:00
mscve
mscve
Microsoft Office Defense in Depth Update
2023-08-08 07:00:00
Windows Search Remote Code Execution Vulnerability
2023-07-11 07:00:00
mmpc
mmpc
Storm-0978 attacks reveal financial and espionage motives
2023-07-11 17:30:00
hivepro
hivepro
Storm-0978 actively exploited the unpatched Office zero-day
2023-07-14 06:45:22
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2023-07-17 14:02:40
Exploit for Vulnerability in Microsoft
2023-09-28 11:53:44
Exploit for Vulnerability in Microsoft
2023-07-18 06:22:36
prion
prion
Remote code execution
2023-07-11 19:15:00
mssecure
mssecure
Storm-0978 attacks reveal financial and espionage motives
2023-07-11 17:30:00
nessus
nessus
Office and Windows HTML Remote Code Execution Vulnerability (CVE-2023-36884) Mitigation
2023-07-13 00:00:00
Security Updates for Microsoft Office Products C2R (August 2023)
2023-08-09 00:00:00
KB5029301: Windows Server 2008 Security Update (August 2023)
2023-08-08 00:00:00
attackerkb
attackerkb
CVE-2023-36884
2023-07-11 00:00:00
cisa_kev
cisa_kev
Microsoft Windows Search Remote Code Execution Vulnerability
2023-07-17 00:00:00
malwarebytes
malwarebytes
Zero-day deploys remote code execution vulnerability via Word documents
2023-07-13 01:00:00
August Patch Tuesday stops actively exploited attack chain and more
2023-08-10 01:00:00
Update now! Microsoft patches a whopping 130 vulnerabilities
2023-07-12 03:00:00
thn
thn
New PEAPOD Cyberattack Campaign Targeting Women Political Leaders
2023-10-13 14:31:00
Operation Rusty Flag: Azerbaijan Targeted in New Rust-Based Malware Campaign
2023-09-19 12:05:00
Microsoft Releases Patches for 132 Vulnerabilities, Including 6 Under Active Attack
2023-07-12 05:34:00
krebs
krebs
Microsoft Patch Tuesday, August 2023 Edition
2023-08-09 02:22:57
Apple & Microsoft Patch Tuesday, July 2023 Edition
2023-07-11 22:55:07
trellix
trellix
The Bug Report - July 2023 Edition
2023-08-02 00:00:00
The Bug Report - July 2023 Edition
2023-08-02 00:00:00
The Tale of Two Exploits - Breaking Down CVE-2023-36884 and the Infection Chain
2023-08-24 00:00:00
qualysblog
qualysblog
Evaluate Your Windows Endpoints for Storm-0978 Activity With Qualys Endpoint Security
2023-07-14 20:55:16
Microsoft and Adobe Patch Tuesday, August 2023 Security Update Review
2023-08-08 20:35:59
Microsoft and Adobe Patch Tuesday, July 2023 Security Update Review
2023-07-11 20:30:33
securelist
securelist
IT threat evolution in Q3 2023. Non-mobile statistics
2023-12-01 10:00:03
avleonov
avleonov
August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper
2023-08-30 16:15:31
Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs
2023-07-28 09:37:41
mskb
mskb
August 8, 2023—KB5029301 (Security-only update)
2023-08-08 07:00:00
August 8, 2023—KB5029318 (Monthly Rollup)
2023-08-08 07:00:00
August 8, 2023—KB5029295 (Monthly Rollup)
2023-08-08 07:00:00
kaspersky
kaspersky
KLA50775 Multiple vulnerabilities in Microsoft Products (ESU)
2023-07-11 00:00:00
KLA50774 Multiple vulnerabilities in Microsoft Windows
2023-07-11 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - August 2023
2023-08-08 21:11:35
Patch Tuesday - July 2023
2023-07-11 21:50:34

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.491 Medium

EPSS

Percentile

97.5%

JSON
Related for CVE-2023-36884
openvas19mscve2mmpc1hivepro1githubexploit6prion1mssecure1nessus13attackerkb1cisa_kev1malwarebytes3thn5krebs2trellix4qualysblog3securelist1avleonov2mskb16kaspersky2rapid7blog2