CVE-2023-36584

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
3.3%
EPSS
89%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.

Vendor
Microsoft
Product
Windows
Added to KEV
Nov 16, 2023
Remediation due
Dec 7, 2023 (US federal deadline)
Ransomware use
Not known
EPSS
3.3% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded