First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-36790

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.22317
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	>= 6.0.6003.0, < 6.0.6003.22317
Microsoft	Windows Server 2008 Service Pack 2	>= 6.0.6003.0, < 6.0.6003.22317
Microsoft	Windows Server 2008 R2 Service Pack 1	>= 6.1.7601.0, < 6.1.7601.26769
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	>= 6.1.7601.0, < 6.1.7601.26769

References

Timeline

Published: Oct 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-367927.8Visual Studio Remote Code Execution Vulnerability CVE-2023-367937.8Visual Studio Remote Code Execution Vulnerability CVE-2023-367947.8Visual Studio Remote Code Execution Vulnerability CVE-2023-367967.8Visual Studio Remote Code Execution Vulnerability CVE-2023-367996.5.NET Core and Visual Studio Denial of Service Vulnerability CVE-2023-36809.8A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part CVE-2023-368005.4Dynamics Finance and Operations Cross-site Scripting Vulnerability CVE-2023-368015.3DHCP Server Service Information Disclosure Vulnerability CVE-2023-368027.8Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability CVE-2023-368035.5Windows Kernel Information Disclosure Vulnerability CVE-2023-368047.8Windows GDI Elevation of Privilege Vulnerability CVE-2023-368057.0Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2023-36790: High severity, CVSS 7.8 | Vulnix