First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-23389

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

Microsoft Defender Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Malware Protection Engine	>= 1.1.0.0, < 1.1.20000.2

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23389Patch, Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23389Patch, Vendor Advisory

Timeline

Published: Mar 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-23395.4Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-233907.83D Builder Remote Code Execution Vulnerability CVE-2023-233915.5Office for Android Spoofing Vulnerability CVE-2023-233929.8HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2023-233937.0Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability CVE-2023-233945.5Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability CVE-2023-233953.1Microsoft SharePoint Server Spoofing Vulnerability CVE-2023-233966.5Microsoft Excel Denial of Service Vulnerability CVE-2023-233979.8Microsoft Outlook Elevation of Privilege Vulnerability CVE-2023-233987.1Microsoft Excel Spoofing Vulnerability CVE-2023-233997.8Microsoft Excel Remote Code Execution Vulnerability CVE-2023-23405.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.