CVE-2023-36860

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Nov 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-368617.8An out-of-bounds write vulnerability exists in the VZT LZMA_read_varint functionality of GTKWave 3.3.115. A specially crafted .vzt file can CVE-2023-368625.5A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS CVE-2023-368647.8An integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf allocation functionality of GTKWave 3.3.115. A sp CVE-2023-368657.8Microsoft Office Visio Remote Code Execution Vulnerability CVE-2023-368667.8Microsoft Office Visio Remote Code Execution Vulnerability CVE-2023-368677.8Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability CVE-2023-368686.5Azure Service Fabric on Windows Information Disclosure Vulnerability CVE-2023-368696.3Azure DevOps Server Spoofing Vulnerability CVE-2023-36879.8A vulnerability was found in Bylancer QuickVCard 2.1. It has been rated as critical. This issue affects some unknown processing of the file CVE-2023-368716.5Azure Active Directory Security Feature Bypass Vulnerability CVE-2023-368725.5VP9 Video Extensions Information Disclosure Vulnerability CVE-2023-368735.9.NET Framework Spoofing Vulnerability