PT-2023-5940 · Microsoft · Wordpad+1

Published 2023-10-10 · Updated 2026-02-11 · CVE-2023-36563

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft WordPad (affected versions not specified)

Description The vulnerability in Microsoft WordPad is related to the disclosure of NTLM hashes, which can be exploited by attackers to obtain sensitive information. This issue can affect the system and potentially allow remote attackers to disclose protected information. The vulnerability has been exploited in real-world attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Information Disclosure

Weakness Enumeration

CWE-200

CWE-20

Related Identifiers

BDU:2023-06637

CVE-2023-36563

Affected Products

Wordpad

Windows

References · 44

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36563 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36563 · Security Note
• https://osv.dev/vulnerability/CVE-2023-36563 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36563 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-36563 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-36563 · Security Note
• https://bdu.fstec.ru/vul/2023-06637 · Security Note
• https://ru.secnews.gr/486403/microsoft-patch-tuesday-oktobriou-2023-diorthonei-104-bugs · Note
• https://twitter.com/htmdcommunity/status/1712196371502018975 · Twitter Post
• https://twitter.com/htmdcommunity/status/1713645920909513203 · Twitter Post
• https://t.me/avleonovcom/1146 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36563 · Note
• https://t.me/echeloneyes/2057 · Telegram Post
• https://twitter.com/0patch/status/1722984665085096023 · Twitter Post
• https://twitter.com/Komodosec/status/1719009396049797290 · Twitter Post