Executive brief
Microsoft WordPad contains an information disclosure vulnerability that can lead to the leakage of NTLM hashes. An attacker can exploit this by inducing a user to open a specially crafted file, potentially leading to further credential-based attacks.
Affected products
- Microsoft Windows 10 1507, 1607, 1809, 21H2, 22H2
- Microsoft Windows 11 21H2, 22H2
- Microsoft Windows Server 2008, 2008 R2, 2012, 2012 R2, 2016, 2019, 2022
- Microsoft WordPad
Timeline
- 2023-10-10: disclosed
- 2023-10-10: patched
- 2023-10-10: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
- 2023-10-10: exploited: Reported as exploited in the wild at time of publication.