{"metadata": {"vulnerability": "CVE-2023-36003", "count": 51, "kinds": {"milestone": 8, "sighting": 22, "kev": 0, "other": 21}}, "data": [{"timestamp": "2023-06-20T20:44:39.821Z", "date_only": false, "value": "2023-06-20T20:44:39.821Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-36003", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-12T08:00:00Z", "date_only": false, "value": "2023-12-12T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36003", "record": "MSRC_CVE-2023-36003", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-12-12T08:00:00Z", "date_only": false, "value": "2023-12-12T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36003", "record": "MSRC_CVE-2023-36003", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-12-12T08:00:00Z", "date_only": false, "value": "2023-12-12T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2023-36003", "field": "containers.cna.datePublic"}, {"timestamp": "2023-12-12T08:00:00Z", "date_only": false, "value": "2023-12-12T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36003", "record": "MSRC_CVE-2023-36003", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-12-12T08:00:00Z", "date_only": false, "value": "2023-12-12T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36003", "record": "MSRC_CVE-2023-36003", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-12-12T18:10:46.330Z", "date_only": false, "value": "2023-12-12T18:10:46.330Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-36003", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-12-12T18:15:20Z", "date_only": false, "value": "2023-12-12T18:15:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-79RG-FMV7-2CJF", "record": "GHSA-79RG-FMV7-2CJF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-12-12T18:15:20.697Z", "date_only": false, "value": "2023-12-12T18:15:20.697", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36003", "record": "FKIE_CVE-2023-36003", "field": "published"}, {"timestamp": "2023-12-12T18:15:20.697Z", "date_only": false, "value": "2023-12-12T18:15:20.697", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-36003", "record": "GSD-2023-36003", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-12-12T18:31:35Z", "date_only": false, "value": "2023-12-12T18:31:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-79RG-FMV7-2CJF", "record": "GHSA-79RG-FMV7-2CJF", "field": "published"}, {"timestamp": "2023-12-12T18:31:35Z", "date_only": false, "value": "2023-12-12T18:31:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-79RG-FMV7-2CJF", "record": "GHSA-79RG-FMV7-2CJF", "field": "modified"}, {"timestamp": "2023-12-12T23:00:00Z", "date_only": false, "value": "2023-12-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-3137", "record": "WID-SEC-W-2023-3137", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-12-12T23:00:00Z", "date_only": false, "value": "2023-12-12T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-3137", "record": "WID-SEC-W-2023-3137", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-12-12T23:00:00Z", "date_only": false, "value": "2023-12-12T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-3137", "record": "WID-SEC-W-2023-3137", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-12-13T00:00:00Z", "date_only": false, "value": "2023-12-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1023", "record": "CERTFR-2023-AVI-1023", "field": "last_revision_date"}, {"timestamp": "2023-12-13T00:00:00Z", "date_only": false, "value": "2023-12-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1023", "record": "CERTFR-2023-AVI-1023", "field": "initial_release_date"}, {"timestamp": "2023-12-13T00:00:00Z", "date_only": false, "value": "2023-12-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1023", "record": "CERTFR-2023-AVI-1023", "field": "revisions.0.revision_date"}, {"timestamp": "2023-12-13T01:20:34.398Z", "date_only": false, "value": "2023-12-13T01:20:34.398649Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-36003", "record": "GSD-2023-36003", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T15:23:44.260Z", "date_only": false, "value": "2023-12-18T15:23:44.260", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-36003", "record": "GSD-2023-36003", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-12T06:34:42Z", "date_only": false, "value": "2024-01-12T06:34:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1435", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "9da6205e-890d-4854-8906-11d8234add07", "content": "CVE-2023-36003 (Windows LPE XAML diagnostics API) \n\nBlog: https://m417z.com/Privilege-escalation-using-the-XAML-diagnostics-API-CVE-2023-36003/\n\nPoC: https://github.com/m417z/CVE-2023-36003-POC\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u043f\u0430\u0442\u0447\u0435 \u043e\u0442 12 \u0434\u0435\u043a\u0430\u0431\u0440\u044f\n\n#lpe #ad #pentest #redteam", "url": "https://t.me/RalfHackerChannel/1435"}, {"timestamp": "2024-01-12T07:52:16Z", "date_only": false, "value": "2024-01-12T07:52:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1674BjUB8N4Vh5UgM4C683OiwC85nxwmrNkvE4vdI1bn-w", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "7a9c04cf-781e-4bb1-bab6-1a29fa4e9228"}, {"timestamp": "2024-01-12T11:17:11Z", "date_only": false, "value": "2024-01-12T11:17:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingbra/64", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "65033daa-b577-40ed-b857-18c8af301d10", "content": "CVE-2023-36003 \nWindows LPE XAML diagnostics API\n\nBlog: https://m417z.com/Privilege-escalation-using-the-XAML-diagnostics-API-CVE-2023-36003/", "url": "https://t.me/hackingbra/64"}, {"timestamp": "2024-01-12T14:44:49Z", "date_only": false, "value": "2024-01-12T14:44:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverse_dungeon/3512", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "b996a11b-51cd-46d7-93e6-f28b0d18e38e", "content": "https://m417z.com/Privilege-escalation-using-the-XAML-diagnostics-API-CVE-2023-36003/", "url": "https://t.me/reverse_dungeon/3512"}, {"timestamp": "2024-01-13T00:02:07Z", "date_only": false, "value": "2024-01-13T00:02:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/G7b-IjdRCp9obn-E1dGhNw5meFxDuDb6nmkyQHVeD0La-Q", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "ae2951a0-a81e-47b9-b331-26810db3feda"}, {"timestamp": "2024-01-13T00:03:50Z", "date_only": false, "value": "2024-01-13T00:03:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yp429WpOodMp2wsu9BvlVCzNIsLBmrj-pplNkdVTxRpCvg", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "c6a8f263-f115-42cd-be3f-e182a055b501"}, {"timestamp": "2024-01-13T04:11:16Z", "date_only": false, "value": "2024-01-13T04:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9771", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "84557287-8ae7-45ef-a25e-92f9b9fd5a79", "content": "#exploit\n1. CVE-2023-36003:\nPrivilege escalation using the XAML diagnostics API\nhttps://github.com/m417z/CVE-2023-36003-POC\n\n2. CVE-2023-46474:\nPMB <=7.5.3 - RCE via Unrestricted File Upload\nhttps://github.com/Xn2/CVE-2023-46474\n\n3. CVE-2022-36553:\nHytec Inter HWL-2511-SS Unauthenticated Remote Command Injection\nhttps://github.com/0xNslabs/CVE-2022-36553-PoC", "url": "https://t.me/CyberSecurityTechnologies/9771"}, {"timestamp": "2024-01-13T20:11:17Z", "date_only": false, "value": "2024-01-13T20:11:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingbra/67", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "39f8ab5c-1cd7-4015-9a24-fb8486c522b6", "content": "Privilege escalation using the XAML diagnostics API (CVE-2023-36003)\n\nhttps://m417z.com/Privilege-escalation-using-the-XAML-diagnostics-API-CVE-2023-36003/", "url": "https://t.me/hackingbra/67"}, {"timestamp": "2024-01-13T20:54:53Z", "date_only": false, "value": "2024-01-13T20:54:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/zero_day_uz/399", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "4ada0b7b-c82c-48d0-b4b2-144519526645", "content": "CVE-2023-36003 (Windows LPE XAML diagnostics API) \n\nBlog: https://m417z.com/Privilege-escalation-using-the-XAML-diagnostics-API-CVE-2023-36003/\n\nPoC: https://github.com/m417z/CVE-2023-36003-POC\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u043f\u0430\u0442\u0447\u0435 \u043e\u0442 12 \u0434\u0435\u043a\u0430\u0431\u0440\u044f\n\n#lpe #ad #pentest #redteam", "url": "https://t.me/zero_day_uz/399"}, {"timestamp": "2024-01-13T21:10:18Z", "date_only": false, "value": "2024-01-13T21:10:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/8228", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "a4d82959-ce37-48e1-ae6b-14ddc782c6dc", "content": "Privilege escalation using the XAML diagnostics API (CVE-2023-36003)\n\nhttps://m417z.com/Privilege-escalation-using-the-XAML-diagnostics-API-CVE-2023-36003/", "url": "https://t.me/thebugbountyhunter/8228"}, {"timestamp": "2024-01-14T23:00:00Z", "date_only": false, "value": "2024-01-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-3137", "record": "WID-SEC-W-2023-3137", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-01-15T05:12:43Z", "date_only": false, "value": "2024-01-15T05:12:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1830", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "61de3eed-c763-48e9-be7a-620d93730b4b", "content": "https://github.com/m417z/CVE-2023-36003-POC\n\nPrivilege escalation using the XAML diagnostics AP\n#github", "url": "https://t.me/CNArsenal/1830"}, {"timestamp": "2024-01-18T16:04:06Z", "date_only": false, "value": "2024-01-18T16:04:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/DQunrip3liepFqDC7aNZvKq8mX0CauQO62G1WmhAJnwiZvk", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "4225519a-cdf4-48c6-8937-4acedcd35224"}, {"timestamp": "2024-02-15T23:00:00Z", "date_only": false, "value": "2024-02-15T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-3137", "record": "WID-SEC-W-2023-3137", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-02-15T23:00:00Z", "date_only": false, "value": "2024-02-15T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-3137", "record": "WID-SEC-W-2023-3137", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-06T22:39:07Z", "date_only": false, "value": "2024-04-06T22:39:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/12686", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "b6c1e1e9-44f5-4804-a316-56d94a44d1c5", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Privilege escalation using the XAML diagnostics API (CVE-2023-36003).\n\nhttps://m417z.com/Privilege-escalation-using-the-XAML-diagnostics-API-CVE-2023-36003/", "url": "https://t.me/cKure/12686"}, {"timestamp": "2024-08-02T16:37:40.778Z", "date_only": false, "value": "2024-08-02T16:37:40.778Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-36003", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:02:46.836Z", "date_only": false, "value": "2024-08-15T18:02:46.836+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-3137", "record": "WID-SEC-W-2023-3137", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T09:01:27Z", "date_only": false, "value": "2024-08-16T09:01:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2506", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "2a112020-09f7-475b-9260-dce43dd41bbd", "content": "#exploit\n1. CVE-2023-36003:\nPrivilege escalation using the XAML diagnostics API\nhttps://github.com/m417z/CVE-2023-36003-POC\n\n2. CVE-2023-46474:\nPMB <=7.5.3 - RCE via Unrestricted File Upload\nhttps://github.com/Xn2/CVE-2023-46474\n\n3. CVE-2022-36553:\nHytec Inter HWL-2511-SS Unauthenticated Remote Command Injection\nhttps://github.com/0xNslabs/CVE-2022-36553-PoC", "url": "https://t.me/Rootsec_2/2506"}, {"timestamp": "2025-01-01T02:18:26.174Z", "date_only": false, "value": "2025-01-01T02:18:26.174Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36003", "record": "MSRC_CVE-2023-36003", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-01T02:18:34.131Z", "date_only": false, "value": "2025-01-01T02:18:34.131Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-36003", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-01T02:18:34.131Z", "date_only": false, "value": "2025-01-01T02:18:34.131Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2023-36003", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:05:38.360Z", "date_only": false, "value": "2026-06-17T06:05:38.360", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36003", "record": "FKIE_CVE-2023-36003", "field": "lastModified"}, {"timestamp": "2026-07-17T11:00:06.450Z", "date_only": false, "value": "2026-07-17T11:00:06.450752Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/270", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "8df1bbb7-4c09-4239-b81a-79085c3d2670", "url": "https://t.me/cyberwarehouse/270"}, {"timestamp": "2026-07-18T00:00:29.207Z", "date_only": false, "value": "2026-07-18T00:00:29.207029Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/270", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "55cf6447-3def-4125-aa61-7b11b0709837", "url": "https://t.me/cyberwarehouse/270"}, {"timestamp": "2026-07-23T04:00:05.109Z", "date_only": false, "value": "2026-07-23T04:00:05.109635Z", "kind": "sighting", "label": "Seen", "source": "Telegram/4io6jbku3v9BzbUr54C3quHavfK_B8Aga3a7QXo1aoyRkdw", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "81e8ada6-2fa2-4047-9b0b-9c82f8216110"}, {"timestamp": "2026-07-24T00:00:21.570Z", "date_only": false, "value": "2026-07-24T00:00:21.570383Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4io6jbku3v9BzbUr54C3quHavfK_B8Aga3a7QXo1aoyRkdw", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "0d084b0d-2b6e-4537-83f7-6d95e04982b8"}, {"timestamp": "2026-07-29T12:02:20.252Z", "date_only": false, "value": "2026-07-29T12:02:20.252981Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4181", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "a7429dd0-8ca1-4b99-8af2-3047e69f2692", "url": "https://t.me/reverseame/4181"}, {"timestamp": "2026-07-30T00:02:23.588Z", "date_only": false, "value": "2026-07-30T00:02:23.588829Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4181", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "f465f6d1-ae8c-4e4a-ab53-7d6bbfe8743e", "url": "https://t.me/reverseame/4181"}, {"timestamp": "2026-08-02T10:27:03.158Z", "date_only": false, "value": "2026-08-02T10:27:03.158850Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4181", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "4558a0b1-86a8-4eb4-ad03-d6e719ab16f7", "url": "https://t.me/reverseame/4181"}, {"timestamp": "2026-08-03T02:07:15.398Z", "date_only": false, "value": "2026-08-03T02:07:15.398512Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4181", "record": "CVE-2023-36003", "field": "creation_timestamp", "uuid": "462a14dd-0ad2-4fd4-a257-9d570f15a38c", "url": "https://t.me/reverseame/4181"}]}