VulnSocial

CVE-2023-36003PoC(microsoft / windows_10_1507)

MEDIUMCVSS 7.3 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Prioritize remediation for microsoft windows_10_1507 systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

XAML Diagnostics Elevation of Privilege Vulnerability

microsoft CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-426

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1507
  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2

Threat summary

  • Public PoC and exploit tooling are both present
  • 2 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 2 signals
  • PoC mentioned or linked in 2 signals
  • Technical details provided in 1 signal
  • 2 total mentions across 1 day

Affected systems

Vendors
microsoft
Products
windows_10_1507windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_21h2windows_11_22h2windows_11_23h2windows_server_2016windows_server_2019

1 version affected across 11 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-23: 2PoC Mentioned / Linked · 2026-07-23: 2Exploit Tool / Code · 2026-07-23: 2Technical Details · 2026-07-23: 107-23
Signal classification1 categories
PoC
2100.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • Clandestine@akaclandestine
    PoC

    GitHub - johnnygreeme/CVE-2023-36003: PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender. · GitHub https://github.com/johnnygreeme/CVE-2023-36003

    Post summary

    A GitHub repository is announced that hosts a proof‑of‑concept exploit for CVE‑2023‑36003, demonstrating a Windows Defender security feature bypass; no active exploitation, patch information, or technical details are included.

    129095396.1K
    64.3K followersView on X
  • ɐpnH@AlAssaf_H
    PoC

    This repo contains a PoC for CVE-2023-36003, a critical security feature bypass vulnerability affecting Windows Defender Exploit Protection. https://github.com/johnnygreeme/CVE-2023-36003

    Post summary

    The text announces a publicly available PoC for CVE-2023-36003, a critical security feature bypass vulnerability in Windows Defender, but contains no evidence of active exploitation or patch status.

    08031146.0K
    828 followersView on X
CPE platform detail11 entries

11 of 11 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1507---
OSmicrosoftwindows_10_1607---
OSmicrosoftwindows_10_1809---
OSmicrosoftwindows_10_21h2---
OSmicrosoftwindows_10_22h2---
OSmicrosoftwindows_11_21h2---
OSmicrosoftwindows_11_22h2---
OSmicrosoftwindows_11_23h2---
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---

Explore more

Back to dashboardmicrosoft CVEswindows_10_1507 vulnerabilities