{"vulnerability": "cve-2023-3640", "sightings": [{"uuid": "7cd4bacd-4130-4628-821b-274c942b5432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36403", "type": "seen", "source": "https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html", "content": "", "creation_timestamp": "2024-04-18T16:45:00.000000Z"}, {"uuid": "265f682a-fc07-4532-9cf1-1f2759196c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36404", "type": "seen", "source": "https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html", "content": "", "creation_timestamp": "2024-04-18T16:45:00.000000Z"}, {"uuid": "5e2f96e2-f6c9-4041-9789-f2dcd56bc352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36404", "type": "seen", "source": "https://googleprojectzero.blogspot.com/2025/04/the-windows-registry-adventure-6-kernel.html", "content": "", "creation_timestamp": "2025-04-16T19:34:14.680000Z"}, {"uuid": "2ecf7cd5-e74f-4117-ae10-15a47c862954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36404", "type": "seen", "source": "https://googleprojectzero.blogspot.com/2025/05/the-windows-registry-adventure-7-attack-surface.html", "content": "", "creation_timestamp": "2025-05-23T07:05:54.874000Z"}, {"uuid": "32e810f5-e7a4-4dd1-8ac6-a46015f9cc9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36404", "type": "seen", "source": "https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html", "content": "", "creation_timestamp": "2025-05-23T05:00:00.000000Z"}, {"uuid": "6b88a05d-fa04-469b-8a01-a0d1cee1975f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-3640", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "ae7f1a4e-fb47-46ec-be0e-8a7469dd59b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3640", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4741", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aSCTF 2023 kernel pwn && CVE-2023-3640\nURL\uff1ahttps://github.com/pray77/CVE-2023-3640\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-07-12T17:42:07.000000Z"}, {"uuid": "377286be-0130-4353-815c-246409e79e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3640", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4740", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aSCTF 2023 kernel pwn && CVE-2023-3640\nURL\uff1ahttps://github.com/pray77/SCTF2023_kernelpwn-CVE-2023-3640\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-07-12T17:29:04.000000Z"}, {"uuid": "a3e51dfb-fdd9-4dfa-9212-f3c28645f843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36409", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-36409\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability\n\ud83d\udccf Published: 2023-11-06T23:12:20.974Z\n\ud83d\udccf Modified: 2025-04-14T22:46:48.622Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36409", "creation_timestamp": "2025-04-14T22:53:35.000000Z"}, {"uuid": "110b91e6-25c8-4a9d-b618-4747de7a30fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3640", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3640\n\ud83d\udd25 CVSS Score: 7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system.\n\ud83d\udccf Published: 2023-07-24T15:19:29.983Z\n\ud83d\udccf Modified: 2025-04-15T11:40:03.124Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:6583\n2. https://access.redhat.com/security/cve/CVE-2023-3640\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2217523", "creation_timestamp": "2025-04-15T11:55:55.000000Z"}, {"uuid": "f9ef08bb-1eed-4086-9158-b32185c124c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36409", "type": "seen", "source": "https://t.me/arpsyndicate/904", "content": "#ExploitObserverAlert\n\nCVE-2023-36409\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-36409. Microsoft Edge (Chromium-based) Information Disclosure Vulnerability\n\nFIRST-EPSS: 0.000630000\nNVD-IS: 2.5\nNVD-ES: 3.9", "creation_timestamp": "2023-12-03T00:30:33.000000Z"}, {"uuid": "b836132e-5b5f-4b3a-9560-03a5a94eb58b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3640", "type": "seen", "source": "https://t.me/arpsyndicate/763", "content": "#ExploitObserverAlert\n\nCVE-2023-3640\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-3640. A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-11-29T15:54:06.000000Z"}, {"uuid": "9e2ee3bb-65a9-48ae-8291-2d5214bc10cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3640", "type": "seen", "source": "https://t.me/cibsecurity/67157", "content": "\u203c CVE-2023-3640 \u203c\n\nA possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-24T20:26:12.000000Z"}, {"uuid": "94e42e0d-0fc9-46a2-a0fd-7b2a3a311347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3640", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16887", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-3640*\nGithub: https://github.com/pray77/CVE-2023-3640", "creation_timestamp": "2026-07-31T00:00:41.507549Z"}, {"uuid": "eb5c5aaf-f218-4260-836c-dc1fd4f9d4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36404", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9717", "content": "#exploit\n1. CVE-2023-6348:\nChrome BindTextSuggestionHostForFrame Type Confusion\nhttps://packetstormsecurity.com/files/176368/Chrome-BindTextSuggestionHostForFrame-Type-Confusion.html\n\n2. CVE-2023-48864:\nSemcms v4.8 web_inc.php SQL Injection\nhttps://github.com/f3lze3/CVE-2023-48864\n\n3. CVE-2023-36404:\nWindows Kernel Information Disclosure\nhttps://packetstormsecurity.com/files/176110/Windows-Kernel-Information-Disclosure.html", "creation_timestamp": "2024-01-06T08:56:36.000000Z"}, {"uuid": "c868d76f-b634-4af4-a162-4482cfbb4cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36407", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10110", "content": "#exploit\n1. CVE-2023-46453:\nGliNet 4.x Authentication Bypass\nhttps://packetstormsecurity.com/files/177485/GliNet-4.x-Authentication-Bypass.html\n\n2. CVE-2024-36407:\nWindows Hyper-V EoP\nhttps://github.com/pwndorei/CVE-2023-36407\n\n3. CVE-2024-21320:\nSpoofing vulnerability in Microsoft Themes\nhttps://github.com/akamai/akamai-security-research/tree/main/PoCs/CVE-2024-21320\n]-> https://www.akamai.com/blog/security-research/2024/mar/leaking-ntlm-credentials-through-windows-themes", "creation_timestamp": "2024-03-26T02:03:18.000000Z"}, {"uuid": "2f76f95f-a14f-450b-ad5d-a2693e46d6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36404", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2419", "content": "#exploit\n1. CVE-2023-6348:\nChrome BindTextSuggestionHostForFrame Type Confusion\nhttps://packetstormsecurity.com/files/176368/Chrome-BindTextSuggestionHostForFrame-Type-Confusion.html\n\n2. CVE-2023-48864:\nSemcms v4.8 web_inc.php SQL Injection\nhttps://github.com/f3lze3/CVE-2023-48864\n\n3. CVE-2023-36404:\nWindows Kernel Information Disclosure\nhttps://packetstormsecurity.com/files/176110/Windows-Kernel-Information-Disclosure.html", "creation_timestamp": "2024-08-16T08:59:55.000000Z"}, {"uuid": "e1f28385-a897-44f0-8c60-27a090ce5a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36407", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/346", "content": "CVE-2024-36407:\nWindows Hyper-V EoP\nhttps://github.com/pwndorei/CVE-2023-36407", "creation_timestamp": "2026-07-17T12:00:07.149948Z"}, {"uuid": "82324aa6-cd88-47c6-be07-56fa1a006949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36407", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/346", "content": "CVE-2024-36407:\nWindows Hyper-V EoP\nhttps://github.com/pwndorei/CVE-2023-36407", "creation_timestamp": "2026-07-18T00:00:32.889323Z"}, {"uuid": "47fbe3b3-94ae-41fa-800e-843eb5239fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3640", "type": "seen", "source": "https://t.me/CVEhub/16887", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-3640*\nGithub: https://github.com/pray77/CVE-2023-3640", "creation_timestamp": "2026-07-29T12:00:15.750452Z"}, {"uuid": "5c473802-45af-4dbb-b3d6-01d2c92ecac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3640", "type": "seen", "source": "https://t.me/CVEhub/16887", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-3640*\nGithub: https://github.com/pray77/CVE-2023-3640", "creation_timestamp": "2026-07-30T00:00:34.953747Z"}]}