Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-36884
HistoryJul 11, 2023 - 7:15 p.m.

CVE-2023-36884

2023-07-1119:15:09
CWE-362
[email protected]
web.nvd.nist.gov
4
windows search
remote code execution
vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8

Confidence

High

EPSS

0.068

Percentile

94.0%

JSON

Windows Search Remote Code Execution Vulnerability

Affected configurations

Nvd
Node
microsoftwindows_10_1507Range<10.0.10240.20107
OR
microsoftwindows_10_1607Range<10.0.14393.6167
OR
microsoftwindows_10_1809Range<10.0.17763.4737
OR
microsoftwindows_10_21h2Range<10.0.19044.3324
OR
microsoftwindows_10_22h2Range<10.0.19044.3324
OR
microsoftwindows_11_21h2Range<10.0.22000.2295
OR
microsoftwindows_11_22h2Range<10.0.22621.2134
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2012Matchr2
OR
microsoftwindows_server_2016Range<10.0.14393.6167
OR
microsoftwindows_server_2016Match10.0.14393.6614
OR
microsoftwindows_server_2019Range<10.0.17763.4737
OR
microsoftwindows_server_2022Range<10.0.20348.1903

Related

openvas 19
mmpc 1
mscve 2
githubexploit 7
hivepro 1
nessus 13
cvelist 1
prion 1
attackerkb 1
mssecure 1
thn 5
malwarebytes 3
cisa_kev 1
cve 1
krebs 2
trellix 4
qualysblog 3
securelist 2
avleonov 2
mskb 16
kaspersky 2
rapid7blog 2
openvas
openvas
Microsoft Project 2013 Remote Code Execution Vulnerability (KB4484489)
2023-08-10 00:00:00
Microsoft PowerPoint 2013 SP1 RCE Vulnerability (KB5002399)
2023-08-10 00:00:00
Microsoft Project 2016 Remote Code Execution Vulnerability (KB5002328)
2023-08-10 00:00:00
mmpc
mmpc
Storm-0978 attacks reveal financial and espionage motives
2023-07-11 17:30:00
mscve
mscve
Microsoft Office Defense in Depth Update
2023-08-08 07:00:00
Windows Search Remote Code Execution Vulnerability
2023-07-11 07:00:00
githubexploit
githubexploit
Exploit for Race Condition in Microsoft
2023-07-18 06:22:36
Exploit for Race Condition in Microsoft
2023-07-17 14:02:40
Exploit for Race Condition in Microsoft
2023-09-28 11:53:44
hivepro
hivepro
Storm-0978 actively exploited the unpatched Office zero-day
2023-07-14 06:45:22
nessus
nessus
Office and Windows HTML Remote Code Execution Vulnerability (CVE-2023-36884) Mitigation
2023-07-13 00:00:00
Security Updates for Microsoft Office Products C2R (August 2023)
2023-08-09 00:00:00
KB5029301: Windows Server 2008 Security Update (August 2023)
2023-08-08 00:00:00
cvelist
cvelist
CVE-2023-36884 Windows Search Remote Code Execution Vulnerability
2023-07-11 18:14:23
prion
prion
Remote code execution
2023-07-11 19:15:00
attackerkb
attackerkb
CVE-2023-36884
2023-07-11 00:00:00
mssecure
mssecure
Storm-0978 attacks reveal financial and espionage motives
2023-07-11 17:30:00
thn
thn
New PEAPOD Cyberattack Campaign Targeting Women Political Leaders
2023-10-13 14:31:00
Operation Rusty Flag: Azerbaijan Targeted in New Rust-Based Malware Campaign
2023-09-19 12:05:00
Microsoft Releases Patches for 132 Vulnerabilities, Including 6 Under Active Attack
2023-07-12 05:34:00
malwarebytes
malwarebytes
Zero-day deploys remote code execution vulnerability via Word documents
2023-07-13 01:00:00
August Patch Tuesday stops actively exploited attack chain and more
2023-08-10 01:00:00
Update now! Microsoft patches a whopping 130 vulnerabilities
2023-07-12 03:00:00
cisa_kev
cisa_kev
Microsoft Windows Search Remote Code Execution Vulnerability
2023-07-17 00:00:00
cve
cve
CVE-2023-36884
2023-07-11 19:15:09
krebs
krebs
Microsoft Patch Tuesday, August 2023 Edition
2023-08-09 02:22:57
Apple & Microsoft Patch Tuesday, July 2023 Edition
2023-07-11 22:55:07
trellix
trellix
The Bug Report - July 2023 Edition
2023-08-02 00:00:00
The Bug Report - July 2023 Edition
2023-08-02 00:00:00
The Tale of Two Exploits - Breaking Down CVE-2023-36884 and the Infection Chain
2023-08-24 00:00:00
qualysblog
qualysblog
Evaluate Your Windows Endpoints for Storm-0978 Activity With Qualys Endpoint Security
2023-07-14 20:55:16
Microsoft and Adobe Patch Tuesday, August 2023 Security Update Review
2023-08-08 20:35:59
Microsoft and Adobe Patch Tuesday, July 2023 Security Update Review
2023-07-11 20:30:33
securelist
securelist
Exploits and vulnerabilities in Q2 2024
2024-08-21 10:00:10
IT threat evolution in Q3 2023. Non-mobile statistics
2023-12-01 10:00:03
avleonov
avleonov
August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper
2023-08-30 16:15:31
Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs
2023-07-28 09:37:41
mskb
mskb
August 8, 2023—KB5029318 (Monthly Rollup)
2023-08-08 07:00:00
August 8, 2023—KB5029301 (Security-only update)
2023-08-08 07:00:00
August 8, 2023—KB5029295 (Monthly Rollup)
2023-08-08 07:00:00
kaspersky
kaspersky
KLA50775 Multiple vulnerabilities in Microsoft Products (ESU)
2023-07-11 00:00:00
KLA50774 Multiple vulnerabilities in Microsoft Windows
2023-07-11 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - August 2023
2023-08-08 21:11:35
Patch Tuesday - July 2023
2023-07-11 21:50:34

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8

Confidence

High

EPSS

0.068

Percentile

94.0%

JSON
Related for NVD:CVE-2023-36884
openvas19mmpc1mscve2githubexploit7hivepro1nessus13cvelist1prion1attackerkb1mssecure1thn5malwarebytes3cisa_kev1cve1krebs2trellix4qualysblog3securelist2avleonov2mskb16kaspersky2rapid7blog2