CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-10-10
Microsoft WordPad Information Disclosure and NTLM Hash Leak Vulnerability (CVE-2023-36563) Security Advisory
[Affected Scope] Microsoft WordPad application on Windows operating systems
[Impact] Attackers can force the system to leak NTLM credentials (hashes) by inducing users to open a specially crafted document, enabling offline brute-force or NTLM relay attacks
[Mitigation] Apply the official Microsoft cumulative security updates, block outbound NTLM traffic, and restrict outbound SMB connections