CVE-2023-36884 is a high-severity Windows Search Remote Code Execution vulnerability affecting various versions of Microsoft Office and Windows, including both x64 and x86 systems, as well as some arm64 systems. This vulnerability allows attackers to execute malicious code remotely, potentially leading to significant loss of confidentiality, integrity, and availability. Microsoft has released an official fix to address this issue, and it is crucial for users to update their systems to protect against potential exploitation.

How do I know if I'm affected?

If you're using certain versions of Microsoft Office or Windows, you might be affected by the vulnerability. Affected systems include Microsoft Office 2019, Office 2021, Word 2013 SP1, Word 2016, Windows 10, Windows 11, and various Windows Server versions. To check if your system is affected, look for these specific versions in your software information. Keep in mind that this vulnerability doesn't impact Apple products.

What should I do if I'm affected?

If you're affected by the vulnerability, follow these simple steps. Update your Microsoft Office and Windows software to the latest version. Install security updates provided by Microsoft. Stay informed about the vulnerability and follow any additional recommendations from official sources like the National Vulnerability Database.

Is CVE-2023-36884 in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, CVE-2023-36884 is in CISA's Known Exploited Vulnerabilities Catalog. This Windows Search Remote Code Execution Vulnerability was added to the catalog on July 17, 2023, and the due date for applying mitigations is August 29, 2023. The required action is to apply vendor-provided mitigations or discontinue the product's use if no mitigations are available. In simpler terms, this means that users should follow the instructions provided by Microsoft to fix the issue or stop using the affected software if no solution is offered.

Weakness enumeration

The CVE-2023-36884 vulnerability involves insufficient information, leading to remote code execution with a high impact on confidentiality, integrity, and availability. Security updates are available to address this issue.

For more details

CVE-2023-36884 is a significant vulnerability affecting various Microsoft Office and Windows versions. Users should update their systems and apply security updates to mitigate the risk. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• Microsoft's Security Update Guide

• CISA's BOD 22-01

• Known Exploited Vulnerabilities Catalog