EXPOSURES › CVE-2023-36036
CVE-2023-36036
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Windows Cloud Files Mini Filter Driver privilege escalation vulnerability allows SYSTEM privilege gain.
The Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges. This vulnerability is actively exploited and poses a high risk to systems running Windows. DIB organizations should ensure they are using the latest updates and patches to mitigate this risk.
Shame score — The vulnerability is actively exploited and allows for SYSTEM privilege gain, which is a significant risk to the security of affected systems.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |