Skip to content

CVE-2023-36880

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
October 14, 2026
Last Seen
October 14, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Security researchers from Doyensec discovered vulnerabilities in SFAPE.dll, a VBS enclave in Windows, allowing local code execution within Isolated User Mode (VTL1). The vulnerabilities were chained to exploit memory corruption, undermining the enclave's isolation guarantees. Microsoft addressed the...

Public Exploits

Checking GitHub for proof-of-concept code…