CVE-2023-36584

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2023-36584 is a security feature bypass vulnerability affecting the Mark of the Web (MOTW) mechanism in Windows. MOTW is a Windows component that tags files originating from the internet and triggers security warnings or protected-view restrictions in applications such as Office and the Edge browser; the flaw allows this tagging and enforcement to be circumvented.

An unauthenticated attacker can exploit the issue over the network by supplying a specially crafted file that requires user interaction, such as opening or saving the file. Successful exploitation results in bypass of MOTW protections, enabling limited integrity and availability impacts without requiring privileges on the target system.

Microsoft has published an advisory and corresponding security update addressing the vulnerability. The flaw is also listed in CISA’s Known Exploited Vulnerabilities catalog, indicating confirmed in-the-wild exploitation.

EPSS scores have reached a peak of 0.1852 with a current value of 0.1542, reflecting moderate and sustained exploitation interest following disclosure.