CVE-2023-36771

Summary

CVE-2023-36771 is a remote code execution vulnerability affecting Microsoft 3D Builder. An attacker can exploit this issue by crafting a specially crafted 3D model file, which, when opened in 3D Builder, can lead to the execution of arbitrary code on the victim's system. Successful exploitation may result in unauthorized system access, data theft, or further compromise. Users are strongly advised to update 3D Builder to the latest version or disable the application to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.