{"metadata": {"vulnerability": "CVE-2023-28229", "count": 62, "kinds": {"milestone": 6, "sighting": 18, "kev": 11, "other": 27}, "linked_omitted": 0}, "data": [{"timestamp": "2023-03-13T22:18:32.384Z", "date_only": false, "value": "2023-03-13T22:18:32.384Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-28229", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2023-28229", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T19:13:37.417Z", "date_only": false, "value": "2023-04-11T19:13:37.417Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28229", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-11T21:15:00Z", "date_only": false, "value": "2023-04-11T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-62CG-XHWR-XF37", "record": "GHSA-62CG-XHWR-XF37", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-04-11T21:15:00Z", "date_only": false, "value": "2023-04-11T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-28229", "record": "GSD-2023-28229", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-04-11T21:15:23.387Z", "date_only": false, "value": "2023-04-11T21:15:23.387", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28229", "record": "FKIE_CVE-2023-28229", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T21:31:01Z", "date_only": false, "value": "2023-04-11T21:31:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-62CG-XHWR-XF37", "record": "GHSA-62CG-XHWR-XF37", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T22:00:00Z", "date_only": false, "value": "2023-04-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0944", "record": "WID-SEC-W-2023-0944", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-04-11T22:00:00Z", "date_only": false, "value": "2023-04-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0944", "record": "WID-SEC-W-2023-0944", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-04-11T22:00:00Z", "date_only": false, "value": "2023-04-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0944", "record": "WID-SEC-W-2023-0944", "field": "vulnerabilities.45.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-04-12T00:00:00Z", "date_only": false, "value": "2023-04-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0306", "record": "CERTFR-2023-AVI-0306", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-04-12T22:00:00Z", "date_only": false, "value": "2023-04-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0944", "record": "WID-SEC-W-2023-0944", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-04-13T01:13:00Z", "date_only": false, "value": "2023-04-13T01:13Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-28229", "record": "GSD-2023-28229", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-09-04T17:10:23Z", "date_only": false, "value": "2023-09-04T17:10:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1004", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "7f7af2cf-492b-4f2b-8878-3dd43f285c94", "content": "https://github.com/Y3A/CVE-2023-28229\n#github #\u63d0\u6743", "url": "https://t.me/CNArsenal/1004", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-06T19:13:17Z", "date_only": false, "value": "2023-09-06T19:13:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3056", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "6d5be836-9421-47b3-b1ea-119f83028287", "content": "CVE-2023-28229\n\nService Elevation of Privilege Vulnerability in Windows CNG Key Isolation\n\nhttps://github.com/Y3A/CVE-2023-28229\n\nReference: https://whereisk0shl.top/post/isolate-me-from-sandbox-explore-elevation-of-privilege-of-cng-key-isolation", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3056", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-07T08:00:59Z", "date_only": false, "value": "2023-09-07T08:00:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3182", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "c63715ca-9520-4edd-80ad-d855c5176d65", "content": "Hackers Factory \n\nTrack down GitHub users.\n\nhttps://github.com/mxrch/GitFive\n\nHere it is, the VMware newest exploit\n\nhttps://github.com/Cyb3rEnthusiast/CVE-2023-34039\n\nA shellcode injection tool capable of bypassing AMSI. Features the QueueUserAPC() injection technique and supports XOR encryption\n\nhttps://github.com/trevorsaudi/Mshikaki\n\nan exploit of Server-side request forgery (SSRF)\n\nhttps://github.com/errorfiathck/ssrf-exploit\n\nUnauthenticated-RCE-FUXA-CVE-2023-33831\n\nhttps://github.com/rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831\n\nCVE-2023-28229\n\nhttps://github.com/Y3A/CVE-2023-28229\n\nIntroductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.\n\nhttps://github.com/arth0sz/Practice-AD-CS-Domain-Escalation\n\nEternalHush - new free advanced open-source c2 framework\n\nhttps://github.com/APT64/EternalHushFramework\n\nPerforms OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. \n\nhttps://github.com/SharadKumar97/OSINT-SPY\n\nGitHub - wvanderp/awesome-dutch-osint\n\nhttps://github.com/wvanderp/awesome-dutch-osint\n\n#infosec #cybersecurity #hackersfactory \n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3182", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-19T15:32:10Z", "date_only": false, "value": "2023-09-19T15:32:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rHnKW8vRtqy60QWa3MSfn1VkHvdSHD70BkeJGq_U2qcpQ9E", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "1e7586db-663c-400d-ba27-11d54a682564", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-25T22:00:00Z", "date_only": false, "value": "2023-09-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0944", "record": "WID-SEC-W-2023-0944", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-10-01T13:13:53Z", "date_only": false, "value": "2023-10-01T13:13:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/5546", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "ec9b3707-50b1-4958-8bc2-ce3c3c33d803", "content": "CVE-2023-28229 - Windows CNG KeyIso RPC EoP/SBX\n\nGithub\n\n#redteam #CVE \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/5546", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-02T14:57:46Z", "date_only": false, "value": "2023-10-02T14:57:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3157", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "79e9cd2c-8666-4711-b8d8-b59df3695faa", "content": "CVE-2023-28229 - Windows CNG KeyIso RPC EoP/SBX\n\nhttps://github.com/Y3A/CVE-2023-28229", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3157", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28229", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5b549e4e-a327-4519-b117-70c5c2df9b88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-28229", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3316b898-2dfe-420d-8a0b-809e882d018e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-04T00:00:00Z", "date_only": true, "value": "2023-10-04", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28229", "field": "containers.adp.0.metrics.0.other.content.dateAdded"}, {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-28229", "field": "evidence.0.details.added_date", "uuid": "3316b898-2dfe-420d-8a0b-809e882d018e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-04T00:00:00Z", "date_only": true, "value": "2023-10-04", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-28229", "field": "evidence.0.details.date_added", "uuid": "5b549e4e-a327-4519-b117-70c5c2df9b88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-28229", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5b549e4e-a327-4519-b117-70c5c2df9b88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-28229", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3316b898-2dfe-420d-8a0b-809e882d018e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-28229", "field": "status.status_updated_at", "uuid": "5b549e4e-a327-4519-b117-70c5c2df9b88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-28229", "field": "status.status_updated_at", "uuid": "3316b898-2dfe-420d-8a0b-809e882d018e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28229", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2023-28229 added to CISA KEV"}, {"timestamp": "2023-10-04T18:10:02Z", "date_only": false, "value": "2023-10-04T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "6cbb407a-b5ca-4947-8843-2369d5492d3d"}, {"timestamp": "2023-10-04T22:00:00Z", "date_only": false, "value": "2023-10-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0944", "record": "WID-SEC-W-2023-0944", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2023-10-04T22:00:00Z", "date_only": false, "value": "2023-10-04T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0944", "record": "WID-SEC-W-2023-0944", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-10-05T11:35:50Z", "date_only": false, "value": "2023-10-05T11:35:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3967", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "57f9d3b4-5899-4881-a28a-cd8cc9a84bec", "content": "\ud83d\udea8 Alert: CISA flags active exploits. Two recent vulnerabilities come under the scanner: \n \n\u2014 CVE-2023-42793: TeamCity Auth Bypass \n\u2014 CVE-2023-28229: Win CNG Flaw \n \nRead details here: https://thehackernews.com/2023/10/cisa-warns-of-active-exploitation-of.html \n \nAct fast, secure your networks\u2014patch by Oct 25!", "url": "https://t.me/thehackernews/3967", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-13T05:10:10Z", "date_only": false, "value": "2023-10-13T05:10:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1270", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "9219aba4-12e1-42ba-9743-8de7008e1ee4", "content": "https://github.com/Y3A/CVE-2023-28229\n#github", "url": "https://t.me/CNArsenal/1270", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-13T05:12:38Z", "date_only": false, "value": "2023-10-13T05:12:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3427", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "bee14cfc-6093-43d5-a0d6-06d5b1bdef3d", "content": "https://github.com/Y3A/CVE-2023-28229", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3427", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-13T10:59:01Z", "date_only": false, "value": "2023-10-13T10:59:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9190", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "44abe608-544c-42a7-ba09-5195e6a8c52f", "content": "#exploit\n1. CVE-2023-28229:\nWindows CNG KeyIso RPC EoP/SBX\nhttps://github.com/Y3A/CVE-2023-28229\n\n2. Polygon Smart Contract Bug\nhttps://blog.chain.link/smart-contract-bug-hunting\n\n3. CVE-2023-36723:\nPoC for arbitrary directory creation bug in Container Manager service\nhttps://github.com/Wh04m1001/CVE-2023-36723", "url": "https://t.me/CyberSecurityTechnologies/9190", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-25T00:00:00Z", "date_only": true, "value": "2023-10-25", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-28229", "field": "evidence.0.details.due_date", "uuid": "5b549e4e-a327-4519-b117-70c5c2df9b88", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:20:48.948Z", "date_only": false, "value": "2023-12-13T01:20:48.948247Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-28229", "record": "GSD-2023-28229", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-06-13T14:21:09.570Z", "date_only": false, "value": "2024-06-13T14:21:09.570748Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28229", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-06-13T14:21:09.570Z", "date_only": false, "value": "2024-06-13T14:21:09.570748Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28229", "record": "FKIE_CVE-2023-28229", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-08-02T12:30:24.656Z", "date_only": false, "value": "2024-08-02T12:30:24.656Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-28229", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:48:38.956Z", "date_only": false, "value": "2024-08-15T17:48:38.956+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0944", "record": "WID-SEC-W-2023-0944", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-08-16T08:33:55Z", "date_only": false, "value": "2024-08-16T08:33:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1347", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "632747b3-2ae9-440e-8b73-ead6d25240b4", "content": "#exploit\n1. CVE-2023-28229:\nWindows CNG KeyIso RPC EoP/SBX\nhttps://github.com/Y3A/CVE-2023-28229\n\n2. Polygon Smart Contract Bug\nhttps://blog.chain.link/smart-contract-bug-hunting\n\n3. CVE-2023-36723:\nPoC for arbitrary directory creation bug in Container Manager service\nhttps://github.com/Wh04m1001/CVE-2023-36723", "url": "https://t.me/Rootsec_2/1347", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T18:04:01Z", "date_only": false, "value": "2024-08-22T18:04:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/202", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "7ea6eae0-79ff-4ea3-afb4-c0b8d7982b81", "content": "\ud83d\udc7b Ghost in the PPL Part 2: From BYOVDLL to Arbitrary Code Execution in LSASS\n\nIn this second installment, the author deepens the exploration of techniques for bypassing LSASS protection, focusing on arbitrary code execution by refining the PoC, exploiting vulnerabilities like CVE-2023-28229, and bypassing Control Flow Guard (CFG) through RPC-based process handle duplication.\n\n\ud83d\udd17 Source:\nhttps://itm4n.github.io/ghost-in-the-ppl-part-2/\n\n#lsa #lsass #ppl #dll #maldev", "url": "https://t.me/HackerArsenal/202", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-24T20:35:21.761Z", "date_only": false, "value": "2024-12-24T20:35:21.761224Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971895", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "1270628c-1629-4185-9a57-544af2712762", "url": "https://feedsin.space/feed/CISAKevBot/items/2971895"}, {"timestamp": "2025-01-23T01:04:30.330Z", "date_only": false, "value": "2025-01-23T01:04:30.330Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-01-23T01:04:58.725Z", "date_only": false, "value": "2025-01-23T01:04:58.725Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2023-28229", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-23T02:10:47Z", "date_only": false, "value": "2025-02-23T02:10:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "865e84e9-f366-4135-bcaa-b1a9a4ec0ce2"}, {"timestamp": "2025-10-21T23:05:49.303Z", "date_only": false, "value": "2025-10-21T23:05:49.303Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-28229", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:49.303Z", "date_only": false, "value": "2025-10-21T23:05:49.303Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28229", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:43Z", "date_only": false, "value": "2025-10-22T00:32:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-62CG-XHWR-XF37", "record": "GHSA-62CG-XHWR-XF37", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:26:49.353Z", "date_only": false, "value": "2026-02-02T12:26:49.353924Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b549e4e-a327-4519-b117-70c5c2df9b88", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "2dfdc9a3-cec9-4ed7-8fa2-604e95b836c4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b549e4e-a327-4519-b117-70c5c2df9b88", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T05:47:11.090Z", "date_only": false, "value": "2026-06-17T05:47:11.090", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28229", "record": "FKIE_CVE-2023-28229", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:47.935Z", "date_only": false, "value": "2026-06-19T12:46:47.935382Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3c975fb4-06d4-40b2-ae8d-d6579b4699cd", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "c9a1a3fd-0462-4b6c-b577-1bbda8993e62", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3c975fb4-06d4-40b2-ae8d-d6579b4699cd", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-28229", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "3316b898-2dfe-420d-8a0b-809e882d018e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:46.276Z", "date_only": false, "value": "2026-06-23T14:05:46.276594Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3316b898-2dfe-420d-8a0b-809e882d018e", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "dca6e58c-597d-4fd4-9537-960fb1848ff2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3316b898-2dfe-420d-8a0b-809e882d018e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-28229", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "5b549e4e-a327-4519-b117-70c5c2df9b88", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T10:48:10.562Z", "anchors": {"origin": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2023-09-04T17:10:23Z", "date_only": false, "value": "2023-09-04T17:10:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1004", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "7f7af2cf-492b-4f2b-8878-3dd43f285c94", "content": "https://github.com/Y3A/CVE-2023-28229\n#github #\u63d0\u6743", "url": "https://t.me/CNArsenal/1004", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28229", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5b549e4e-a327-4519-b117-70c5c2df9b88", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 15181200.0, "hours": 4217.0, "days": 175.70833333333334, "min_seconds": 15181200.0, "max_seconds": 15267600.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28229", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5b549e4e-a327-4519-b117-70c5c2df9b88", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 15181200.0, "hours": 4217.0, "days": 175.70833333333334, "min_seconds": 15181200.0, "max_seconds": 15267600.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28229", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5b549e4e-a327-4519-b117-70c5c2df9b88", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 12651023.0, "hours": 3514.1730555555555, "days": 146.4238773148148, "min_seconds": 12651023.0, "max_seconds": 12651023.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-09-04T17:10:23Z", "date_only": false, "value": "2023-09-04T17:10:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1004", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "7f7af2cf-492b-4f2b-8878-3dd43f285c94", "content": "https://github.com/Y3A/CVE-2023-28229\n#github #\u63d0\u6743", "url": "https://t.me/CNArsenal/1004", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": true, "seconds": -15181200.0, "hours": -4217.0, "days": -175.70833333333334, "min_seconds": -15267600.0, "max_seconds": -15181200.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2023-10-04T00:00:00Z", "date_only": false, "value": "2023-10-04T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-28229", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5b549e4e-a327-4519-b117-70c5c2df9b88", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploit_publication_to_patch": {"available": true, "seconds": -12651023.0, "hours": -3514.1730555555555, "days": -146.4238773148148, "min_seconds": -12651023.0, "max_seconds": -12651023.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2023-09-04T17:10:23Z", "date_only": false, "value": "2023-09-04T17:10:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1004", "record": "CVE-2023-28229", "field": "creation_timestamp", "uuid": "7f7af2cf-492b-4f2b-8878-3dd43f285c94", "content": "https://github.com/Y3A/CVE-2023-28229\n#github #\u63d0\u6743", "url": "https://t.me/CNArsenal/1004", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2023-04-11T07:00:00Z", "date_only": false, "value": "2023-04-11T07:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-28229", "record": "MSRC_CVE-2023-28229", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}}}