Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2023-36884

Your trail

Where next?

Selected cve

CVE-2023-36884

Windows Search Remote Code Execution Vulnerability

39 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority78.6–91.6

Coverage85.0%

Connections33

Choose an action.

Evidence state

identity unresolved
known present
source constrained
evidence unknown

Snapshot-bound reason tuple

Last verified source snapshot retainedfactor_a_kev

The admitted source contract constrains coverage for this claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Review source contract

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-10-22T18:07:53.945Z
Resolution: Resolve identity

Connections 33

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2022

000bf6ef-4398-4ac9-9ff8-129953eee435

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2016

c43b34aa-9b85-4dad-b893-dbf9b7fbf6bd

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)

4f064ab4-e507-4630-bb30-c2de915f3b75

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows 11 version 22H2

e6a03f4c-8953-43e1-a5cb-e7797c312b66

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2008 Service Pack 2

25bbfb40-03d3-4a16-9f3c-c249a024af55

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2008 R2 Service Pack 1

05a2f268-9e97-4852-abf7-3be5de852530

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2012

d46531d7-d0d9-4121-870e-69807f0b9608

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2008 Service Pack 2

a5699a2a-57cf-4734-8d62-0cb498b0bbc1

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2012 (Server Core installation)

09683810-d9b9-4824-8bd2-3008d7129c62

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2016 (Server Core installation)

7f833b03-ea0c-4713-8c2d-a1c1cf899963

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2012 R2 (Server Core installation)

8fc20013-a251-4fe8-be65-a1ab922a9c96

has cited scope2 retained · stored CVE-2023-36884 → Microsoft · Windows 10 Version 1809

18a0c8aa-60b3-41de-859c-689733946e8136b96871-95b7-4735-8e91-73f42d393e98

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)

d68ac787-5d7d-49aa-b8fb-3d5c01b4c429

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows 10 Version 22H2

d1e7d55c-d08b-4af7-a689-41aeee4bfe27

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows 10 Version 1507

d4722913-0dfb-48cc-873f-0387be11bd56

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows 10 Version 21H2

34bdf4c7-8e3b-41d2-ae67-f9a54b4b7a08

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows 11 version 21H2

242b555a-7d0b-4b52-b27b-1ce777dc188c

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2019

e28aabb3-1b78-4cee-8971-ea4591dfc6f1

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows 10 Version 1607

e6058dae-2fc7-4d0d-acac-0ecbfd62906d

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2012 R2

be8f1a6d-a9c8-4799-8fa0-a552bec1434b

has cited scope1 retained · stored CVE-2023-36884 → Microsoft · Windows Server 2019 (Server Core installation)

89185f11-ab68-4a60-9867-57e0ecb9913d

has vulnerable target scope1 retained · stored CVE-2023-36884 → microsoft · windows_server_2016

bdfa79ae-6a5c-4dbf-8133-9b845d3dc36a

has vulnerable target scope2 retained · stored CVE-2023-36884 → microsoft · windows_server_2008

376cd21e-53b9-4c70-a774-64116f70205ea597b624-79d9-455a-adf2-e42dac5467ca

has vulnerable target scope1 retained · stored CVE-2023-36884 → microsoft · windows_server_2019

bffd6794-9603-4de3-8abb-69a7f143dc17

has vulnerable target scope2 retained · stored CVE-2023-36884 → microsoft · windows_server_2012

4f46df5c-ad27-4a98-a9da-3de28386c52a6afb4ad1-8f15-4402-afd7-e9150f1c99fa

has vulnerable target scope2 retained · stored CVE-2023-36884 → microsoft · windows_10_1607

80b087f2-39a3-4143-b516-706811ec65fb94a065e8-ef84-4a83-8f06-a93b3d2ba1f2

has vulnerable target scope1 retained · stored CVE-2023-36884 → microsoft · windows_11_21h2

850af4c4-c016-4dd4-8b80-41fb82e8b784

has vulnerable target scope1 retained · stored CVE-2023-36884 → microsoft · windows_10_1507

c12331d9-2009-4f4d-8872-6e6c2889f410

has vulnerable target scope3 retained · stored CVE-2023-36884 → microsoft · windows_10_1809

5ddb924f-5dc1-47a9-8ae5-cab041974367c0853bcb-227f-4f0f-8373-789d643e527de73b20d7-fd52-419a-b562-4f1b7a629203

has vulnerable target scope1 retained · stored CVE-2023-36884 → microsoft · windows_10_22h2

2d26f19d-f227-43e9-b219-11a3ce7428a4

has vulnerable target scope1 retained · stored CVE-2023-36884 → microsoft · windows_server_2022

6aab2e24-f88b-433c-b70d-efa0af5c833d

has vulnerable target scope1 retained · stored CVE-2023-36884 → microsoft · windows_10_21h2

c5df7eb2-8219-4671-8286-45d314dd4eaf

has vulnerable target scope1 retained · stored CVE-2023-36884 → microsoft · windows_11_22h2

ea5380f6-629a-491e-9660-94d1f4c39a86

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Oct 22, 2026, 6:07 PM UTC · 34 entities · 33 relationships · bounded complete