Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2023-36584

Your trail

Where next?

Selected cve

CVE-2023-36584

Windows Mark of the Web Security Feature Bypass Vulnerability

45 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority63.5–69.6

Coverage92.7%

Connections32

Choose an action.

Evidence state

identity unresolved
known present
evidence unknown

Snapshot-bound reason tuple

Evidence supportedfactor_a_kev

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: Resolve identity

Connections 32

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2022

2e09c740-ba7e-41d5-8c61-46efce2f6374

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2016

2046c2bd-1d56-479f-9dd8-2c76966e532d

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)

c360b68b-b49c-4e67-8dd8-1fecceb0471e

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows 11 version 22H2

34ed429b-d654-43a4-8ddc-e7f57d4bbffa

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2008 Service Pack 2

2c0859ef-fffd-40bc-9b06-199b9a10a72a

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2008 R2 Service Pack 1

53f4791f-1b02-4532-b402-70215fea10d5

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2012

13f5586c-a7f8-4f2b-a688-2d39d8c12992

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2008 Service Pack 2

e75e9958-d868-47b4-8107-2a9020c95c5a

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2012 (Server Core installation)

67d009f8-129b-42ce-93f6-942a69dbc78d

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2016 (Server Core installation)

915377d5-9744-4435-9259-dfa298e32395

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2012 R2 (Server Core installation)

ac438560-4a3a-48c4-a81f-abc7d1e9c594

has cited scope2 retained · stored CVE-2023-36584 → Microsoft · Windows 10 Version 1809

22247301-9cbb-4504-a3bd-e1b505efa5f4baa089fc-749c-42b6-9546-6dee41aeeca9

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)

6e0272cb-9219-4a43-9a4f-b302fd1ba65a

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows 10 Version 22H2

01551120-0f83-4685-bd63-004c6069be43

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows 10 Version 1507

38f6386f-3a4a-4815-9b75-5cc8e83ab1fc

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows 10 Version 21H2

1e04ceb6-0f09-4475-b6cf-6d373c2ce2bc

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows 11 version 21H2

d8ffa0c7-d131-4052-911d-e5b41fe05f14

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2019

248abed0-cb1e-4ac9-a33f-583471d4583e

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows 10 Version 1607

ce28d685-e662-49ca-b73c-9d3543f70ca3

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2012 R2

49dc6467-95c2-4a32-88ce-2ff34194a9f8

has cited scope1 retained · stored CVE-2023-36584 → Microsoft · Windows Server 2019 (Server Core installation)

380646d9-b61c-40fa-90c6-a7eea374673b

has vulnerable target scope1 retained · stored CVE-2023-36584 → microsoft · windows_server_2016

f040cb62-d743-4a28-9c6f-004030cc0d63

has vulnerable target scope3 retained · stored CVE-2023-36584 → microsoft · windows_server_2008

2c5b956d-ec1e-4a6f-8838-bb8c3cb657716ea2b638-acb7-46e6-8c37-8331644173c2a4af0731-cbc4-4541-b8a0-953fec8ab68e

has vulnerable target scope1 retained · stored CVE-2023-36584 → microsoft · windows_server_2019

b0fc1060-f124-4829-b39f-94f48b963c2a

has vulnerable target scope2 retained · stored CVE-2023-36584 → microsoft · windows_server_2012

2eb44fef-b77f-4ac3-8eda-327cb31d5b028442408b-a490-42f8-9857-ac5697b7ec45

has vulnerable target scope2 retained · stored CVE-2023-36584 → microsoft · windows_11_21h2

6e6bf7a3-a7bb-4217-9165-bfa11afac287735444d5-f156-40fc-8975-204989418ab4

has vulnerable target scope2 retained · stored CVE-2023-36584 → microsoft · windows_10_1507

0074f05c-4980-4395-96b6-4fc4fb90ef15ca0aade2-3b93-477b-a42f-b9878b5dc933

has vulnerable target scope3 retained · stored CVE-2023-36584 → microsoft · windows_10_1809

7d6d0e55-e97d-40e2-b8a7-a36b77be69abb6d5a164-49fd-400e-b89c-ead03f8c6d60bcbb139f-a6c7-48d4-b672-c03857b34f1a

has vulnerable target scope3 retained · stored CVE-2023-36584 → microsoft · windows_10_22h2

5cff3213-7aed-4f34-b1a0-f0ab2be7e9886d3da5c0-36fe-4321-9a5a-9a43a75b38c682fa976e-d8c7-479d-b336-d19727322b36

has vulnerable target scope1 retained · stored CVE-2023-36584 → microsoft · windows_server_2022

cb36a6cf-c99b-4d78-9f83-98206437d23e

has vulnerable target scope3 retained · stored CVE-2023-36584 → microsoft · windows_10_21h1

72a1a789-60af-4d03-a755-809f1c4f88df7c0afcd8-3814-4161-9caf-6fb35ff9ef2b7e1de8fb-b240-4422-bcef-4a619099d04e

has vulnerable target scope2 retained · stored CVE-2023-36584 → microsoft · windows_11_22h2

b0c173bb-ab80-4939-b5c2-56a64550ed0cec77a948-aacc-4d0a-b019-5c5e0087f54e

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Aug 27, 2026, 6:09 PM UTC · 33 entities · 32 relationships · bounded complete