CVE-2023-36778

—1

CVSS 3.1

8.0 high

EPSS

4%p89

Published

Oct 10, 2023 (Oct 10, 2023)

Modified

Jun 17, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: exchange server
Weakness: CWE-426
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news2 stories

Patch Tuesday, October 2023 Edition

Krebs on SecurityOct 11, 02:13 UTC · Oct 11, 2023Vulnerability CVE-2023-42724 CVE-2023-5217 CVE-2023-44487+4 CVEs

60

Microsoft fixes exploited WordPad, Skype for Business zero-days (CVE-2023-36563, CVE-2023-41763)

Help Net SecurityOct 10, 00:00 UTC · Oct 10, 2023Exploit / PoC in the wildCVE-2023-36563 CVE-2023-41763 CVE-2023-44487+2 CVEs

60