Hackers using Weaponized Office Document to Exploit Windows Search RCE

A new attack chain campaign has been discovered, which involves the exploitation of CVE-2023-36884 and CVE-2023-36584. CVE-2023-36884 was a remote code execution vulnerability, and CVE-2023-36584 was a security bypass vulnerability that can be used to exploit CVE-2023-36884. CVE-2023-36884 was given a severity rating of 8.8 (High), and CVE-2023-36584’s severity rating was 5.4 (Medium). However, the […]

The post Hackers using Weaponized Office Document to Exploit Windows Search RCE appeared first on Cyber Security News.

attack attack chain bypass bypass vulnerability campaign code code execution cve cve-2023-36584 cve-2023-36884 cyber security document exploit exploitation hackers high office rating rce remote code remote code execution search security security bypass severity threats vulerability vulnerability windows