CVE-2023-36884 — Microsoft Windows Search Remote Code Execution Vulnerability

Description

Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.

How to fix CVE-2023-36884

No package mapping is available — consult the references below for vendor-specific guidance.

Is CVE-2023-36884 being exploited?

Yes — CVE-2023-36884 is on the CISA Known Exploited Vulnerabilities (KEV) catalog. Patch immediately.

Affected packages (0)

No package mapping in OSV.