The Tale of Two Exploits - Breaking Down CVE-2023-36884 and the Infection Chain

🗓️ 24 Aug 2023 00:00:00Reported by TrellixType

The Tale of Two Exploits - Breaking Down CVE-2023-36884 and the Infection Chain, Microsoft released a patch fixing actively exploited RCE vulnerabilities and disclosed a phishing campaign by Storm-0978 using a zero-day vulnerability CVE-2023-36884, exploited via crafted Office OOXML documents with geopolitical lures related to UWC. Exploitation chain broken with a defense-in-depth update

Reporter	Title	Published	Views	Family All 108
GithubExploit	Exploit for Race Condition in Microsoft	28 Sep 202311:53	–	githubexploit
GithubExploit	Exploit for Race Condition in Microsoft	17 Jul 202314:02	–	githubexploit
GithubExploit	Exploit for Race Condition in Microsoft	12 Jul 202314:13	–	githubexploit
ATTACKERKB	CVE-2023-36884	11 Jul 202300:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs	28 Jul 202309:37	–	avleonov
Information Security Automation	August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper	30 Aug 202316:15	–	avleonov
BDU FSTEC	The vulnerability of Windows operating systems and Microsoft Office software, related to errors in processing input data, allows a perpetrator to execute arbitrary code.	12 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-36884	11 Jul 202321:56	–	circl
CISA KEV Catalog	Microsoft Windows Search Remote Code Execution Vulnerability	17 Jul 202300:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	17 Jul 202312:00	–	cisa

24 Aug 2023 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 3.17.5

EPSS0.98932

SSVC