Threat Intelligence / CVE / CVE-2023-35628

CVE-2023-35628

CVSS 8.1 (HIGH) · EPSS 17.1% · Published 2023-12-12

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS v3 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-416, NVD-CWE-noinfo

Threats tracking this CVE

Microsoft NTLM Deprecation - Three-Stage Phase-Out Plan — HIGH

References

Full detection coverage & IOCs for threats exploiting CVE-2023-35628 are available via the Threadlinqs MCP server (Purple tier). View plans →

Markdown version · Threadlinqs Intelligence