CVE-2023-28236

Опубликовано: 11 апр. 2023

Источник: msrc

CVSS3: 7.8

EPSS Низкий

Описание

Windows Kernel Elevation of Privilege Vulnerability

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Продукт	Статья	Обновление
Windows Server 2012	5025287 5025272	Monthly Rollup Security Only
Windows Server 2012 (Server Core installation)	5025287 5025272	Monthly Rollup Security Only
Windows Server 2012 R2	5025285 5025288	Monthly Rollup Security Only
Windows Server 2012 R2 (Server Core installation)	5025285 5025288	Monthly Rollup Security Only
Windows 10 for 32-bit Systems	5025234	Security Update
Windows 10 for x64-based Systems	5025234	Security Update
Windows Server 2016	5025228	Security Update
Windows 10 Version 1607 for 32-bit Systems	5025228	Security Update
Windows 10 Version 1607 for x64-based Systems	5025228	Security Update
Windows Server 2016 (Server Core installation)	5025228	Security Update

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 37%

0.00153

Низкий

7.8 High

CVSS3

CVE-2023-28236

CVSS3: 7.8

nvd

больше 2 лет назад

Windows Kernel Elevation of Privilege Vulnerability

GHSA-h57g-2jj7-wmp5

CVSS3: 7.8

github

больше 2 лет назад

Windows Kernel Elevation of Privilege Vulnerability

BDU:2023-02059

CVSS3: 7.8

fstec

больше 2 лет назад

Уязвимость ядра операционных систем Windows, позволяющая нарушителю обойти ограничения безопасности и повысить свои привилегии

EPSS

Процентиль: 37%

0.00153

Низкий

7.8 High

CVSS3