First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-36876

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Windows Server 2008 R2 Service Pack 1	>= 6.1.7601.0, < 6.1.7601.26664
Microsoft	Windows Server 2008 R2 Service Pack 1 (Server Core installation)	>= 6.1.7601.0, < 6.1.7601.26664

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36876Patch, Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36876Patch, Vendor Advisory

Timeline

Published: Aug 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-368774.5Azure Apache Oozie Spoofing Vulnerability CVE-2023-368784.3Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability CVE-2023-36889.8A vulnerability classified as critical has been found in Bylancer QuickJob 6.1. Affected is an unknown function of the component GET Paramet CVE-2023-368804.8Microsoft Edge (Chromium-based) Information Disclosure Vulnerability CVE-2023-368814.5Azure Apache Ambari Spoofing Vulnerability CVE-2023-368828.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-368834.3Microsoft Edge for iOS Spoofing Vulnerability CVE-2023-368847.5Windows Search Remote Code Execution Vulnerability CVE-2023-368865.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability CVE-2023-368877.8Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability CVE-2023-368886.3Microsoft Edge for Android (Chromium-based) Tampering Vulnerability CVE-2023-368895.5Windows Group Policy Security Feature Bypass Vulnerability