CVE-2023-36884: Windows Search Remote Code Execution Vulnerability

First published: Tue Jul 11 2023(Updated: )

Microsoft is investigating reports of a series of remote code execution vulnerabilities impacting Windows and Office products. Microsoft is aware of targeted attacks that attempt to exploit these vulnerabilities by using specially-crafted Microsoft Office documents. An attacker could create a specially crafted Microsoft Office document that enables them to perform remote code execution in the context of the victim. However, an attacker would have to convince the victim to open the malicious file. Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This might include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs. Please see the Microsoft Threat Intelligence Blog https://aka.ms/Storm-0978  Entry for important information about steps you can take to protect your system from this vulnerability. This CVE will be updated with new information and links to security updates when they become available.

Credit: secure@microsoft.com secure@microsoft.com secure@microsoft.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/msrc
• collector/msrc-cve
• agent/type
• agent/first-publish-date
• exploited/true
• source/Microsoft
• agent/remedy
• agent/software-canonical-lookup
• agent/title
• agent/severity
• agent/weakness
• agent/description
• agent/author
• collector/bleeping-computer
• source/BleepingComputer
• alias/CVE-2023-36884
• alias/CVE-2024-9680
• alias/CVE-2024-49039
• collector/the-register
• source/The Register
• alias/CVE-2023-28461
• agent/references
• agent/event
• agent/trending
• collector/mitre-cve
• source/MITRE
• agent/source
• agent/last-modified-date
• agent/software-canonical-lookup-request
• collector/nvd-api
• source/NVD
• collector/nvd-cve
• collector/nvd-index
• collector/nvd-latest
• agent/softwarecombine
• agent/tags
• ransomware/true
• collector/cisa-known-exploited
• source/CISA
• vendor/microsoft
• canonical/microsoft word 2016
• canonical/microsoft word 2013
• canonical/microsoft windows server 2008 r2
• canonical/microsoft windows server 2012 r2
• canonical/microsoft office 2019 for mac
• canonical/microsoft office ltsc 2021
• canonical/microsoft windows server
• canonical/microsoft windows server 2016
• canonical/microsoft windows server 2019
• canonical/windows 11
• version/windows 11/22h2
• version/windows 11/21h2
• canonical/microsoft windows server 2022
• canonical/microsoft windows 10
• version/microsoft windows server/sp2
• version/microsoft windows server/r2-sp1
• version/microsoft windows server/r2
• canonical/microsoft office
• version/microsoft office/2019
• version/microsoft office/2021
• canonical/microsoft office word
• version/microsoft office word/2013-sp1
• version/microsoft office word/2016
• canonical/windows 10
• version/windows 10/1809
• version/windows 10/22h2
• version/windows 10/1607
• version/windows 10/21h2
• canonical/microsoft windows operating system