CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft WordPad Information Disclosure and NTLM Hash Leak Vulnerability (CVE-2023-36563) Security Advisory
[Affected Scope] Microsoft WordPad application on Windows operating systems
[Impact] Attackers can force the system to leak NTLM credentials (hashes) by inducing users to open a specially crafted document, enabling offline brute-force or NTLM relay attacks
[Mitigation] Apply the official Microsoft cumulative security updates, block outbound NTLM traffic, and restrict outbound SMB connections
Microsoft Word Information Disclosure and NTLM Hash Leakage Vulnerability (CVE-2023-36761) Technical Analysis & Mitigation Guide
[Affected Scope] Broad range of Microsoft Office products including Microsoft Word 2013, 2016, 2019, 2021, and Microsoft 365 Apps
[Impact] Attackers can force the victim's system to leak NTLM credentials (hashes) to an external malicious server simply by having the victim select or preview a crafted document in the Preview Pane
[Mitigation] Apply the official Microsoft security updates immediately, block outbound SMB (TCP 445) traffic at the perimeter, and restrict outbound NTLM authentication via Group Policy