Lucene search

[email protected]NVD:CVE-2023-36436

HistoryOct 10, 2023 - 6:15 p.m.

CVE-2023-36436

2023-10-1018:15:12

[email protected]

web.nvd.nist.gov

windows

mshtml

remote code execution

vulnerability

cve-2023-36436

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

45.0%

JSON

Windows MSHTML Platform Remote Code Execution Vulnerability

Affected configurations

Nvd

Node

microsoftwindows_10_1507Range<10.0.10240.20232x64

microsoftwindows_10_1507Range<10.0.10240.20232x86

microsoftwindows_10_1809Range<10.0.17763.4974arm64

microsoftwindows_10_1809Range<10.0.17763.4974x64

microsoftwindows_10_1809Range<10.0.17763.4974x86

microsoftwindows_10_21h1Range<10.0.19041.3570arm64

microsoftwindows_10_21h1Range<10.0.19041.3570x64

microsoftwindows_10_21h1Range<10.0.19041.3570x86

microsoftwindows_10_22h2Range<10.0.19041.3570arm64

microsoftwindows_10_22h2Range<10.0.19041.3570x64

microsoftwindows_10_22h2Range<10.0.19041.3570x86

microsoftwindows_11_21h2Range<10.0.22000.2538arm64

microsoftwindows_11_21h2Range<10.0.22000.2538x64

microsoftwindows_11_22h2Range<10.0.22621.2428arm64

microsoftwindows_11_22h2Range<10.0.22621.2428x64

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_server_2008Match-sp2x86

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Matchr2

microsoftwindows_server_2016Match-

microsoftwindows_server_2019Match-

microsoftwindows_server_2022Match-

VendorProductVersionCPE
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:arm64:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:x64:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:x86:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*

Vendor	Product	Version	CPE
microsoft	windows_10_1507	*	cpe:2.3:o:microsoft:windows_10_1507:::::::x64:*
microsoft	windows_10_1507	*	cpe:2.3:o:microsoft:windows_10_1507:::::::x86:*
microsoft	windows_10_1809	*	cpe:2.3:o:microsoft:windows_10_1809:::::::arm64:*
microsoft	windows_10_1809	*	cpe:2.3:o:microsoft:windows_10_1809:::::::x64:*
microsoft	windows_10_1809	*	cpe:2.3:o:microsoft:windows_10_1809:::::::x86:*
microsoft	windows_10_21h1	*	cpe:2.3:o:microsoft:windows_10_21h1:::::::arm64:*
microsoft	windows_10_21h1	*	cpe:2.3:o:microsoft:windows_10_21h1:::::::x64:*
microsoft	windows_10_21h1	*	cpe:2.3:o:microsoft:windows_10_21h1:::::::x86:*
microsoft	windows_10_22h2	*	cpe:2.3:o:microsoft:windows_10_22h2:::::::arm64:*
microsoft	windows_10_22h2	*	cpe:2.3:o:microsoft:windows_10_22h2:::::::x64:*