{"uuid": "bcb19eb5-b9ce-4910-9c03-aa698a1a11ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36396", "type": "seen", "source": "https://t.me/sysadm_in_up/2119", "content": "MagicDot: A Hacker\u2019s Magic Show of Disappearing Dots and Spaces\n\nThis action is completed by most user-space APIs in Windows. By exploiting this known issue, I was able to uncover:\n\n\ud83d\udd39 One remote code execution (RCE) vulnerability (CVE-2023-36396) in Windows\u2019s new extraction logic for all newly supported archive types that allowed me to craft a malicious archive that would write anywhere I chose on a remote computer once extracted, leading to code execution.\n\ud83d\udd39 Two elevation of privilege (EoP) vulnerabilities: one (CVE-2023-32054) that allowed me to write into files without the required privileges by manipulating the restoration process of a previous version from a shadow copy and another that allowed me to delete files without the required privileges.\n\nWith Demo..:\n\nhttps://www.safebreach.com/blog/magicdot-a-hackers-magic-show-of-disappearing-dots-and-spaces/", "creation_timestamp": "2026-07-29T12:03:17.653345Z"}