CVE Catalog
Actively exploited in the wild
Microsoft WordPad Information Disclosure Vulnerability
Microsoft - WordPad · Listed in the CISA KEV since 2023-10-10. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2023-36563
MediumCVSS 6.5KEVSummary
Information Disclosure vulnerability in Microsoft WordPad. Technical details are not available in the description.
Risk Assessment
Risk of leaking sensitive data processed in WordPad, potentially compromising information confidentiality.
Recommendation
Apply security updates from Microsoft for WordPad.
Other vulnerabilities in Microsoft WordPad
Original NVD description (English source)
Microsoft WordPad Information Disclosure Vulnerability