CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Search Remote Code Execution Vulnerability (CVE-2023-36884) Security Advisory & Mitigation Guide
[Affected Scope] All endpoint systems running Microsoft Windows and Microsoft Office suites
[Impact] Remote attackers can execute arbitrary code with system privileges via specially crafted documents, leading to full system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or implement the registry-based workaround
Microsoft Windows Search Service Remote Code Execution Vulnerability Analysis and Mitigation Guide (CVE-2017-8543)
[Affected Scope] Broad range of Microsoft Windows operating systems including Windows XP, Vista, 7, 8, 8.1, 10, and Windows Server 2003, 2008, 2012, 2016.
[Impact] An unauthenticated remote attacker can exploit this vulnerability via SMB to execute arbitrary code with SYSTEM privileges, leading to full system compromise.
[Mitigation] Immediately apply the official Microsoft security patches, or disable the Windows Search service and block SMB port (TCP 445) as a temporary workaround.