Discovering and Blocking a Zero-Day Exploit: The Case of CVE-2023-36874

Originally published by CrowdStrike. In July 2023, CrowdStrike discovered an unknown exploit kit leveraging a still-unknown vulnerability affecting the Windows Error Reporting (WER) component. Our team prepared to report this newly discovered vulnerability to Microsoft — only to discover that the Google Threat Analysis Group had independently discovered and disclosed it shortly before we did. Microsoft assigned the identifier CVE-2023-36874 to the vulnerability. Given this vulnerability was a...

analysis blocking case crowdstrike cve cve-2023-36874 discover error exploit exploit kit google google threat analysis group july july 2023 kit microsoft report reporting team threat threat analysis threat analysis group vulnerability windows zero-day zero-day exploit