BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2023-36563Microsoft WordPad Information Disclosure Vulnerability

Microsoft WordPad Information Disclosure Vulnerability

6.5 MEDIUMEPSS 20.31%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
6.5MEDIUM3.1microsoft (CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
6.5MEDIUM3.1microsoft (CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
5.5MEDIUM3.1NVDCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA required action

⚡ Known exploited · remediation due Oct 31, 2023

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Details

CVE ID
CVE-2023-36563
Status
Analyzed
Assigner (CNA)
microsoft
Published
Oct 10, 2023
Last modified
2026-06-17 06:06 UTC
Weaknesses
  • CWE-20 · Improper Input Validation

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:21 UTC.