Microsoft Windows Search CVE-2023-36884 Remote Code Execution Vulnerability

Description

Race condition in the Windows Search component allows remote code execution with high confidentiality, integrity, and availability impact, requiring user interaction to exploit.

Outbreak Alert

Microsoft has identified a phishing campaign conducted by the threat actor tracked as Storm-0978 targeting defense and government entities in Europe and North America. The campaign involved the abuse of CVE-2023-36884, a remote code execution vulnerability exploited via specially crafted Microsoft Office documents spread using phishing techniques.

View the full Outbreak Alert Report

Affected Applications

Windows Server 2016
Windows Server 2022
Windows 10
Windows 11
Windows Server 2012
Windows Server 2008
Windows Server 2019

References