CVE-2023-36884 Microsoft Windows
Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Search Remote Code Execution Vulnerability
- Added
- 2023-07-17
- Federal patch deadline
- 2023-08-29
- Ransomware use
- known