CVE detail
CVE-2023-29325
Windows OLE Remote Code Execution Vulnerability
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 13.9 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
3 source links · newest first
- 15th May – Threat Intelligence ReportCheck Point Research
For the latest discoveries in cyber research for the week of 15th May, please download our Threat_Intelligence Bulletin TOP ATTACKS AND BREACHES The Swedish-Swiss multinational automation company ABB has been a victim of a ransomware attack conducted by the Russian Black Basta ransomware group. The threat actors have attacked the company’s Windows Active Directory, affecting […]
vendorresearch.checkpoint.comMay 15, 2023, 1:58 PM Microsoft’s May 2023 security updates address a total of 40 newly documented vulnerabilities, including two flaws already exploited in attacks.
newswww.securityweek.comMay 9, 2023, 7:21 PM- Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)Help Net Security
For May 2023 Patch Tuesday, Microsoft has delivered fixes for 38 CVE-numbered vulnerabilities, including a patch for a Windows bug (CVE-2023-29336) and a Secure Boot bypass flaw (CVE-2023-24932) exploited by attackers in the wild. The two exploited bugs (CVE-2023-29336, CVE-2023-24932) CVE-2023-29336 is a vulnerability that allows attackers to gain SYSTEM privileges. Flagged by researchers with AV maker Avast, it seems probable that it’s being exploited to deliver malware. Microsoft has offered no details about the … More →
newswww.helpnetsecurity.comMay 9, 2023, 6:58 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2023-21808CVSS 7.8 · High
.NET and Visual Studio Remote Code Execution Vulnerability
- CVE-2023-21688CVSS 7.8 · High
NT OS Kernel Elevation of Privilege Vulnerability
- CVE-2024-43599CVSS 8.8 · High
Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2024-43570CVSS 6.4 · Medium
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2024-43556CVSS 7.8 · High
Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2024-43535CVSS 7.0 · High
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability