Lucene search
HistoryOct 10, 2023 - 6:15 p.m.
CVE-2023-36702
microsoft
directmusic
remote code execution
vulnerability
cve-2023-36702
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
45.0%
Microsoft DirectMusic Remote Code Execution Vulnerability
Affected configurations
Node
microsoftwindows_10_1507Range<10.0.10240.20232x64
ORmicrosoftwindows_10_1507Range<10.0.10240.20232x86
ORmicrosoftwindows_10_1607Range<10.0.14393.6351x64
ORmicrosoftwindows_10_1607Range<10.0.14393.6351x86
ORmicrosoftwindows_10_1809Range<10.0.17763.4974
ORmicrosoftwindows_10_21h2Range<10.0.19041.3570
ORmicrosoftwindows_10_22h2Range<10.0.19045.3570
ORmicrosoftwindows_11_21h2Range<10.0.22000.2538
ORmicrosoftwindows_11_22h2Range<10.0.22621.2428
ORmicrosoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2019Match-
ORmicrosoftwindows_server_2022Match-
Related
prion
prion
Remote code execution
2023-10-10 18:15:00
cve
cve
CVE-2023-36702
2023-10-10 18:15:15
cvelist
cvelist
CVE-2023-36702 Microsoft DirectMusic Remote Code Execution Vulnerability
2023-10-10 17:07:42
mscve
mscve
Microsoft DirectMusic Remote Code Execution Vulnerability
2023-10-10 07:00:00
mskb
mskb
October 10, 2023âKB5031408 (Monthly Rollup)
2023-10-10 07:00:00
October 10, 2023âKB5031441 (Security-only update)
2023-10-10 07:00:00
October 10, 2023âKB5031427 (Security-only update)
2023-10-10 07:00:00
nessus
nessus
KB5031441: Windows Server 2008 R2 Security Update (October 2023)
2023-10-10 00:00:00
KB5031427: Windows Server 2012 Security Update (October 2023)
2023-10-10 00:00:00
KB5031407: Windows Server 2012 R2 Security Update (October 2023)
2023-10-10 00:00:00
kaspersky
kaspersky
KLA61359 Multiple vulnerabilities in Microsoft Products (ESU)
2023-10-10 00:00:00
KLA61358 Multiple vulnerabilities in Microsoft Windows
2023-10-10 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5031377)
2023-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5031356)
2023-10-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5031362)
2023-10-11 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - October 2023
2023-10-10 20:34:57
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.8
Confidence
High
EPSS
0.001
Percentile
45.0%
Related for NVD:CVE-2023-36702