CVE-2023-36017CWE-843

Windows Scripting Engine Memory Corruption Vulnerability

High · published November 14, 2023

CVSS v3.1

8.8

EPSS

25%

Percentile

97.9

In the wild

Unconfirmed

What it is

Windows Scripting Engine Memory Corruption Vulnerability

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.25289 · 97.9th percentile
Weakness: CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published: 2023-11-14T17:57Z

EPSS history

Timeline

14 NOV 17:57Z
Windows Scripting Engine Memory Corruption Vulnerability
cvelistv5