CVE-2023-36036

Vulnerability updated a year ago (2024-01-10T14:25:38.971Z)

Download STIX

Preview STIX

Not enough context has been learned about CVE-2023-36036 for a description yet. However we're tracking it as a Vulnerability profile. Vulnerability: A flaw in software design or implementation

Description last updated:

What's your take? (Question 1 of 4)

Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.

Aliases We are not currently tracking any aliases

Miscellaneous Associations

Other elements of context that could aid in the identification of relevance

Vulnerability

Microsoft

Windows

Analyst Notes & Discussion

Be the first to leave your mark here! Log in to share your views and vote.

Associated Vulnerabilities

To see the evidence that has resulted in these vulnerability associations, create a free account

Alias Description	Association Type	Votes
The CVE-2023-36025 Vulnerability is associated with CVE-2023-36036. CVE-2023-36025 is a significant vulnerability identified in the Windows SmartScreen security feature. It was one of three zero-day vulnerabilities discovered, with the others being CVE-2023-36033, a privilege escalation vulnerability in the Windows DWM Core Library, and CVE-2023-36036, another privi	Unspecified	2
The CVE-2023-36033 Vulnerability is associated with CVE-2023-36036. CVE-2023-36033 is a significant privilege escalation vulnerability found in the Windows Desktop Window Manager (DWM) Core Library. This flaw was discovered as a zero-day vulnerability, meaning it was actively exploited before Microsoft could provide a patch. The exploit allows an attacker who succes	Unspecified	2

Source Document References

Information about the CVE-2023-36036 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more

Source Link	CreatedAt	Title
DARKReading	6 months ago	Critical RCE Bug Opens Microsoft Servers to Takeover
CERT-EU	a year ago	December 2023 Patch Tuesday: 33 fixes to wind the year down - Help Net Security
CERT-EU	a year ago	Tripwire Patch Priority Index for November 2023
CrowdStrike	a year ago	November Patch Tuesday 2023: Updates and Analysis \| CrowdStrike
CERT-EU	a year ago	Cyber Security Week In Review: November 17, 2023
CERT-EU	a year ago	Microsoft’s November 2023 Patch Tuesday Addresses 3 Zero-Days, 104 Vulnerabilities
CERT-EU	a year ago	Microsoft patches 3 high-severity bugs under active attack
Malwarebytes	a year ago	Update now! Microsoft patches 3 actively exploited zero-days \| Malwarebytes
Canadian Centre for Cyber Security	a year ago	Microsoft security advisory – October 2023 monthly rollup (AV23-700) - Canadian Centre for Cyber Security
CERT-EU	a year ago	GovCERT.HK - Security Alerts
CERT-EU	a year ago	Microsoft’s November 2023 Patch Tuesday fixes over 50 bugs, including 3 zero-days
CERT-EU	a year ago	Microsoft's Patch Tuesday fixes five zero-days
InfoSecurity-magazine	a year ago	Microsoft Fixes Five Zero-Day Vulnerabilities
CERT-EU	a year ago	Azure CLI credential leak part of Microsoft's monthly patch rollup
CERT-EU	a year ago	Ноябрьские патчи Microsoft устраняют 58 дыр, 5 используются в атаках
Securityaffairs	a year ago	Microsoft Patch Tuesday security updates fixed 3 actively exploited flaws
CERT-EU	a year ago	Microsoft Patch Tuesday, November 2023 Edition – GIXtools
CERT-EU	a year ago	Microsoft Targets 5 Zero-Day Flaws in November Security Patch -- Redmondmag.com
CERT-EU	a year ago	Microsoft fixes security holes including 3 already exploited
DARKReading	a year ago	Microsoft Zero-Days Allow Defender Bypass, Privilege Escalation