CVE-2023-36761

MediumCVSS 6.5/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Microsoft Word Information Disclosure Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Sep 12, 2023
Last modified
Jun 17, 2026
Added to CISA KEV
Sep 12, 2023
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-367627.3Microsoft Word Remote Code Execution VulnerabilityCVE-2023-367637.5Microsoft Outlook Information Disclosure VulnerabilityCVE-2023-367648.8Microsoft SharePoint Server Elevation of Privilege VulnerabilityCVE-2023-367659.8Microsoft Office Elevation of Privilege VulnerabilityCVE-2023-367665.5Microsoft Excel Information Disclosure VulnerabilityCVE-2023-367674.3Microsoft Office Security Feature Bypass VulnerabilityCVE-2023-367695.4Microsoft OneNote Spoofing VulnerabilityCVE-2023-36778.8The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to SQL Injection via the pageId parameter in versions up to, and inclCVE-2023-367707.83D Builder Remote Code Execution VulnerabilityCVE-2023-367717.83D Builder Remote Code Execution VulnerabilityCVE-2023-367727.83D Builder Remote Code Execution VulnerabilityCVE-2023-367737.83D Builder Remote Code Execution Vulnerability
CVE-2023-36761: Medium severity, CVSS 6.5 | Vulnix