CVE-2023-36033Vulnerability
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 2 years ago
CISA KEVAdded 14 Nov 2023
Fix due 5 Dec 2023
Used by ransomware: not knownCISA KEV catalogue
Fix due 5 Dec 2023
Used by ransomware: not knownCISA KEV catalogue
EPSS10.9%
higher than 95% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 95% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
In-the-Wild Windows LPE 0-days: Insights & Detection Strategies“Security researcher Quan Jin reported an in-the-wild vulnerability exploit for CVE-2023-36033, and a detailed writeup explaining the exploit's stages was published later by Google Project Zero.”
Indicators reported together
named in the same reports- process[.]pidin 1 report
- host.os[.]familyin 1 report
- hxxps://i.blackhat[.]com/USA-22/Thursday/us-22-Jin-The-Journey-Of-Hunting-ITW-Windows-LPE-0day-wp.pdfin 1 report
- i.blackhat[.]comin 1 report
- hxxps://googleprojectzero.github[.]io/0days-in-the-wild/rca.htmlin 1 report
- googleprojectzero.github[.]ioin 1 report
- hxxps://conference.hitb[.]org/hitbsecconf2023ams/session/hunting-windows-desktop-window-manager-bugs/in 1 report
- conference.hitb[.]orgin 1 report
Copy these 8 indicators · defanged
Also named with it: CVE-2022-24521, CVE-2023-2825, CVE-2022-41073
Thanks — we review every report.