Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2023-36563

Microsoft WordPad Information Disclosure Vulnerability

CVSS 6.5 · MediumBuzz score 61.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 61.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 23.0 · diversity 13.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
23.0
9 evidence mentions in the snapshot
Diversity score
13.0
4 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
9 source links · newest first
  • Microsoft enforces defenses preventing NTLM relay attacksHelp Net Security

    Since making Kerberos the default Windows authentication protocol in 2000, Microsoft has been working on eventually retiring NTLM, its less secure and obsolete counterpart. Until NTLM gets disabled by default, Microsoft is working on shoring up defenses against NTLM relay attacks. How do NTLM relay attacks work? NTLM is a suite of Microsoft protocols that authenticate users and computers based on a challenge/response mechanism between the client (which seeks to be authenticated) and server (which … More →

    newswww.helpnetsecurity.comDec 11, 2024, 12:59 PM
  • Microsoft Rolls Out Default NTLM Relay Attack MitigationsSecurityWeek

    Microsoft has rolled out new default security protections that mitigate NTLM relaying attacks across on-premises Exchange, AD CS, and LDAP services.

    newswww.securityweek.comDec 10, 2024, 11:23 AM
  • 16th October – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 9th October, please download our Threat_Intelligence Bulletin. TOP ATTACKS AND BREACHES LockBit ransomware gang has claimed responsibility for an alleged attack on the multibillion-dollar IT products and services reseller CDW. The gang has demanded $80M ransom and threatened to release stolen data, said to […]

    vendorresearch.checkpoint.comOct 16, 2023, 2:04 PM
  • Week in review: Patched curl and libcurl vulnerability, 15 free M365 security training modulesHelp Net Security

    Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Turning military veterans into cybersecurity experts In this Help Net Security interview, James Murphy, the Director of the TechVets Programme at the Forces Employment Charity and member of Fortinet’s Veterans Program Advisory Council, discusses the challenges that military veterans face when transitioning from military to civilian life. Unmasking the limitations of yearly penetration tests In this Help Net Security interview, … More →

    newswww.helpnetsecurity.comOct 15, 2023, 8:00 AM
  • CISA adds Adobe Acrobat Reader flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs

    US CISA added the flaw CVE-2023-21608 in Adobe Acrobat Reader to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five new flaws to its Known Exploited Vulnerabilities Catalog, including a high-severity flaw (CVE-2023-21608) (CVSS score: 7.8) in Adobe Acrobat Reader. The flaw is a use-after-free issue, an attacker can trigger the flaw to achieve […]

    newssecurityaffairs.comOct 11, 2023, 6:12 PM
  • CISA Warns of Attacks Exploiting Adobe Acrobat VulnerabilitySecurityWeek

    CISA has added five bugs to its Known Exploited Vulnerabilities catalog, including the recent WordPad, Skype, and HTTP/2 zero-days.

    newswww.securityweek.comOct 11, 2023, 10:00 AM
  • Microsoft Patch Tuesday updates for October 2023 fixed three actively exploited zero-day flawsSecurity Affairs

    Microsoft Patch Tuesday security updates for October 2023 fixed three actively exploited zero-day vulnerabilities. Microsoft Patch Tuesday security updates for October 2023 addressed a total of 103 vulnerabilities in Microsoft Windows and Windows Components; Exchange Server; Office and Office Components; ASP.NET Core and Visual Studio; Azure; Microsoft Dynamics; and Skype for Business. Three of the […]

    newssecurityaffairs.comOct 11, 2023, 7:25 AM
  • Microsoft fixes exploited WordPad, Skype for Business zero-days (CVE-2023-36563, CVE-2023-41763)Help Net Security

    On this October 2023 Patch Tuesday, Microsoft has released 103 patches and has fixed three actively exploited vulnerabilities (CVE-2023-36563, CVE-2023-41763, CVE-2023-44487). The exploited zero-days (CVE-2023-36563, CVE-2023-41763, CVE-2023-44487) CVE-2023-36563, discovered by Microsoft Threat Intelligence, is a WordPad vulnerability that could allow attackers to grab NTLM hashes (i.e., encrypted user passwords on Windows systems). “To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted … More →

    newswww.helpnetsecurity.comOct 10, 2023, 6:59 PM
  • Microsoft Fixes Exploited Zero-Days in WordPad, Skype for BusinessSecurityWeek

    Microsoft patches more than 100 vulnerabilities across the Windows ecosystem and warns that three are already being exploited in the wild.

    newswww.securityweek.comOct 10, 2023, 6:20 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence