Phoenix
Sigma IntelligenceBeta
Emerging Threats
CVE2023

CVE-2023-27363

1Rules
3References
1Folders
2023-10-11Latest
Summary

CVE-2023-27363 is tracked here through 1 Sigma detection for exploitation attempts and related post-exploitation behavior observed in 2023. Coverage centers on windows / file_event.

Related Detections
Search this threat
Emerging Threathightest

Potential CVE-2023-27363 Exploitation - HTA File Creation By FoxitPDFReader

Detects suspicious ".hta" file creation in the startup folder by Foxit Reader. This can be an indication of CVE-2023-27363 exploitation.

WindowsFile Event
TA0003 · PersistenceT1505.001 · SQL Stored Procedurescve.2023-27363detection.emerging-threats
GregoryWed Oct 112023
References
1
Resolving title…
github.com
2
Resolving title…
zerodayinitiative.com
3
Resolving title…
tarlogic.com