CVE detail
CVE-2023-36563 — Microsoft WordPad Information Disclosure Vulnerability
Published 2023-10-10 · Modified 2023-10-10 · Source kev
HIGH
severity
CVSS-derived band
0.2072
EPSS probability
exploitation probability, 30d
97.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2023-10-31
⚠ Actively exploited in the wild — CISA KEV listed 2023-10-10, federal remediation due 2023-10-31.
Description
Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References