CVE-2023-36884

KEV RANSOMWAREHIGH 7.5EPSS 98.9%

Windows Search Remote Code Execution Vulnerability

CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 98.93% chance of exploitation in the next 30 days, 100th percentile
CISA KEV: added 2023-07-17, used in ransomware campaigns
Published: 2023-07-11
Updated: 2026-08-10

Proof-of-concept exploits (5)

ToddMaxey/CVE-2023-368840★ · 2023-07-20
jakabakos/CVE-2023-36884-MS-Office-HTML-RCE41★ · 2023-11-02
or2me/CVE-2023-36884_patcher0★ · 2023-07-18
raresteak/CVE-2023-368841★ · 2023-07-30
zerosorai/CVE-2023-368842★ · 2023-07-15

References

Related