CVE-2023-36563

MediumCVSS 5.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Microsoft WordPad Information Disclosure Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Oct 10, 2023
Last modified
Jun 17, 2026
Added to CISA KEV
Oct 10, 2023
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-365646.5Windows Search Security Feature Bypass VulnerabilityCVE-2023-365657.0Microsoft Office Graphics Elevation of Privilege VulnerabilityCVE-2023-365666.5Microsoft Common Data Model SDK Denial of Service VulnerabilityCVE-2023-365677.5Windows Deployment Services Information Disclosure VulnerabilityCVE-2023-365687.0Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityCVE-2023-365698.4Microsoft Office Elevation of Privilege VulnerabilityCVE-2023-36579.8A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. This issue affects soCVE-2023-365707.3Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-365717.3Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-365727.3Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-365737.3Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-365747.3Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability