Home / Vulnerabilities / CVE-2023-36563
MEDIUM SEVERITY
CVE-2023-36563Microsoft · WordPad

Microsoft WordPad Information Disclosure Vulnerability

Technical Severity

CVSS v3.1 Metrics

MEDIUM
6.5 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Exploitation Likelihood

EPSS Prediction

2.47 %
Predictive Probability
Percentile Rank
85.2 th

Documented as more likely to be exploited than 85.2% of known CVEs.

Detection Date

Oct 10, 2023

Remediation Due

Oct 31, 2023

CISA Catalog Active

Threat Analysis

Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.

Remediation Directive

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

External Intelligence

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36563

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36563

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2023-36563