CVE-2023-36563
Microsoft WordPad Information Disclosure Vulnerability
Published Oct 10, 2023 · updated Jun 16, 2026 · microsoft windows 10 1507
Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.
Timeline
Detection, updates, and resolution for this record.
Oct 10, 2023 · Catalog
Detected
Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.
Oct 10, 2023 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Oct 31, 2023 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Oct 31, 2023
Affected
- cpe microsoft/windows 10 1507version unspecified
- cpe microsoft/windows 10 1607version unspecified
- cpe microsoft/windows 10 1809version unspecified
- cpe microsoft/windows 10 21h2version unspecified
- vendor Microsoft WordPadversion unspecified
Sources
- CISA KEVCVE-2023-36563
Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.
cisa.gov - CVE.orgCVE-2023-36563
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-36563
30-day exploitation probability 20.3%
first.org - NIST NVDCVE-2023-36563
Microsoft WordPad Information Disclosure Vulnerability
nvd.nist.gov