CVE-2023-36736 - Microsoft Identity Linux Broker Remote Code Execution Vulnerability

Back Back to CVE browser

MEDIUM

Microsoft Identity Linux Broker Remote Code Execution Vulnerability

Published Sep 12, 2023

4.4

MEDIUM

CVSS 3.1

EPSS 1.38%

Description

Microsoft Identity Linux Broker Remote Code Execution Vulnerability

Affected products

Vendor Microsoft Product Microsoft Identity Linux Broker Default
n/a
- Version
  1.0.0
  Status
  affected
  Constraints
  <1.6.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Identity Linux Broker

n/a

Version	Status	Constraints
1.0.0	affected	<1.6.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36736
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36736		vendor-advisoryPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Sep 12, 2023

Updated Oct 30, 2025

Reserved Jun 26, 2023

Link CVE-2023-36736

CISA Vulnrichment

Updated Feb 26, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-36736

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-36736