Back to the CVE list
CVE-2023-36884 CISA KEV · Actively exploitedLinked to ransomware

Windows Search Remote Code Execution Vulnerability

CVSS score

7.5

EPSS probability

%98.9

Risk score

14.8

Published

3 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

The remediation script should set the reg entries described in https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 . The detection script checks if they exist. Provided AS-IS without any warrenty. (★0)

Public PoCSource updated: 12.07.2023 23:18:01

This is an emergency solution while Microsoft addresses the vulnerability. (★0)

Public PoCSource updated: 16.07.2023 02:41:54

Script to check for CVE-2023-36884 hardening (★0)

Public PoCSource updated: 17.07.2023 23:22:04

CVE-2023-36884 临时补丁 (★0)

Public PoCSource updated: 18.07.2023 15:22:37

PowerShell Script for initial mitigation of vulnerability (★0)

Public PoCSource updated: 21.07.2023 06:10:49

#comeonits2023 #ie9 #Storm-0978 (★0)

Public PoCSource updated: 30.07.2023 23:53:26

MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit (★0)

Public PoCSource updated: 28.09.2023 20:56:29

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-36884"