CVE-2023-35356
HIGHMicrosoft Windows 10 1607 < 10.0.14393.6085 - Type Confusion
Title source: ruleDescription
Windows Kernel Elevation of Privilege Vulnerability
References (4)
Core 4
Core References
Exploit, Third Party Advisory
http://packetstormsecurity.com/files/174115/Microsoft-Windows-Kernel-Arbitrary-Read.html
Exploit, Third Party Advisory
http://packetstormsecurity.com/files/174118/Microsoft-Windows-Kernel-Security-Descriptor-Use-After-Free.html
Patch, Vendor Advisory vendor-advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35356
Exploit, Third Party Advisory
http://packetstormsecurity.com/files/176451/Microsoft-Windows-Registry-Predefined-Keys-Privilege-Escalation.html
Scores
CVSS v3
7.8
EPSS
0.0045
EPSS Percentile
63.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-843
Status
published
Products (9)
microsoft/windows_10_1607
< 10.0.14393.6085
microsoft/windows_10_1809
< 10.0.17763.4645
microsoft/windows_10_21h2
< 10.0.19041.3208
microsoft/windows_10_22h2
< 10.0.19045.3208
microsoft/windows_11_21h2
< 10.0.22000.2176
microsoft/windows_11_22h2
< 10.0.22621.1992
microsoft/windows_server_2016
microsoft/windows_server_2019
microsoft/windows_server_2022
Published
Jul 11, 2023
Tracked Since
Feb 18, 2026