CVE-2023-35312

Опубликовано: 11 июл. 2023

Источник: msrc

CVSS3: 7.8

EPSS Низкий

Описание

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

What privileges could be gained by an attacker who successfully exploited the vulnerability?

An attacker who successfully exploited this vulnerability could gain administrator privileges.

Продукт	Статья	Обновление
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)	5028240 5028224	Monthly Rollup Security Only
Windows Server 2008 R2 for x64-based Systems Service Pack 1	5028240 5028224	Monthly Rollup Security Only
Windows Server 2012	5028232 5028233	Monthly Rollup Security Only
Windows Server 2012 (Server Core installation)	5028232 5028233	Monthly Rollup Security Only
Windows Server 2012 R2	5028228 5028223	Monthly Rollup Security Only
Windows Server 2012 R2 (Server Core installation)	5028228 5028223	Monthly Rollup Security Only
Windows 10 for 32-bit Systems	5028186	Security Update
Windows 10 for x64-based Systems	5028186	Security Update
Windows Server 2016	5028169	Security Update
Windows 10 Version 1607 for 32-bit Systems	5028169	Security Update

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation More Likely

DOS

N/A

EPSS

Процентиль: 60%

0.00394

Низкий

7.8 High

CVSS3

CVE-2023-35312

CVSS3: 7.8

nvd

около 2 лет назад

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

GHSA-w28h-vj63-44qh

CVSS3: 7.8

github

около 2 лет назад

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

BDU:2023-04164

CVSS3: 7.8

fstec

около 2 лет назад

Уязвимость драйвера VOLSNAP.SYS операционных систем Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 60%

0.00394

Низкий

7.8 High

CVSS3