CVE-2023-36025

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 5, 2026 13 articles

VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

91.47%

probability

This CVE has a 91.47% probability of being exploited in the next 30 days.

0% Top 99.7th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Days

TheHackerNews

Microsoft fixes two Windows zero-days exploited in malware attacks

BleepingComputer Apr 09, 2024

Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included

TheHackerNews

Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days

TheHackerNews

New Windows SmartScreen bypass exploited as zero-day since March

BleepingComputer Aug 13, 2024

Hackers used new Windows Defender zero-day to drop DarkMe malware

BleepingComputer Feb 13, 2024

Microsoft November 2023 Patch Tuesday fixes 5 zero-days, 58 flaws

BleepingComputer Nov 14, 2023

Microsoft and Adobe Patch Tuesday, November 2023 Security Update Review

Qualys Nov 14, 2023

Security Advisory 2023-090

CERT-EU Nov 20, 2023

DarkGate Malware Exploited Recently Patched Microsoft Flaw in Zero-Day Attack

TheHackerNews

Decoy Microsoft Word Documents Used to Deliver Nim-Based Malware

TheHackerNews

DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks

TheHackerNews

Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice

TheHackerNews

Signal Intelligence

Confidenceⓘ

85%

EPSS 91.47%

Mentions 13

Last Seen Aug 13, 2024

CNA Information

Analyst Note

CVE-2023-36025 is explicitly named as a zero-day exploited in the wild since March 2023, preceding the November 2023 patch publication. Multiple authoritative sources (BleepingComputer, CERT-EU) confirm active exploitation in malware attacks before patch availability, meeting all zero-day criteria.