Zero-day deploys remote code execution vulnerability via Word documents

🗓️ 13 Jul 2023 01:00:00Reported by Malwarebytes blogType

malwarebytes🔗 www.malwarebytes.com👁 50 Views

Zero-day remote code exec vulnerability targeting Ukraine with a phishing campaign tracked to group "Storm-0978", utilizing Word exploit to deliver a backdoor and trojanized software

Reporter	Title	Published	Views	Family All 98
GithubExploit	Exploit for Race Condition in Microsoft	28 Sep 202311:53	–	githubexploit
GithubExploit	Exploit for Race Condition in Microsoft	17 Jul 202314:02	–	githubexploit
GithubExploit	Exploit for Race Condition in Microsoft	12 Jul 202314:13	–	githubexploit
ATTACKERKB	CVE-2023-36884	11 Jul 202300:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs	28 Jul 202309:37	–	avleonov
Information Security Automation	August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper	30 Aug 202316:15	–	avleonov
Circl	CVE-2023-36884	11 Jul 202321:56	–	circl
CISA KEV Catalog	Microsoft Windows Search Remote Code Execution Vulnerability	17 Jul 202300:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	17 Jul 202312:00	–	cisa
CNNVD	Microsoft Office 安全漏洞	11 Jul 202300:00	–	cnnvd