CVE-2023-36396

—1

CVSS 3.1

7.8 high

EPSS

2%p75

Published

Nov 14, 2023 (Nov 14, 2023)

Modified

Jun 17, 2026

Description

Windows Compressed Folder Remote Code Execution Vulnerability

Vendors: microsoft
Products: windows 11 22h2, windows 11 23h2
Weakness: CWE-41
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news2 stories

Windows DOS-to-NT flaws exploited to achieve unprivileged rootkit

Security AffairsApr 22, 10:45 UTC · Apr 22, 2024Malware CVE-2023-36396 CVE-2023-32054 CVE-2023-42757

47

Researchers Uncover Windows Flaws Granting Hackers Rootkit

The Hacker NewsApr 22, 10:16 UTC · Apr 22, 2024Malware CVE-2023-32054 CVE-2023-36396 CVE-2023-42757

47