CVE-2023-35644

Опубликовано: 12 дек. 2023

Источник: msrc

CVSS3: 7.8

EPSS Низкий

Описание

Windows Sysmain Service Elevation of Privilege Vulnerability

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Продукт	Статья	Обновление
Windows 10 Version 1809 for 32-bit Systems	5033371	Security Update
Windows 10 Version 1809 for x64-based Systems	5033371	Security Update
Windows 10 Version 1809 for ARM64-based Systems	5033371	Security Update
Windows Server 2019	5033371	Security Update
Windows Server 2019 (Server Core installation)	5033371	Security Update
Windows Server 2022	5033118 5033464	Security Update Security Hotpatch Update
Windows Server 2022 (Server Core installation)	5033118 5033464	Security Update Security Hotpatch Update
Windows 11 version 21H2 for x64-based Systems	5033369	Security Update
Windows 11 version 21H2 for ARM64-based Systems	5033369	Security Update
Windows 10 Version 21H2 for 32-bit Systems	5033372	Security Update

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation More Likely

DOS

N/A

EPSS

Процентиль: 90%

0.05457

Низкий

7.8 High

CVSS3

CVE-2023-35644

CVSS3: 7.8

nvd

больше 1 года назад

Windows Sysmain Service Elevation of Privilege Vulnerability

GHSA-76pp-5phh-864m

CVSS3: 7.8

github

больше 1 года назад

Windows Sysmain Service Elevation of Privilege

BDU:2023-08743

CVSS3: 7.8

fstec

больше 1 года назад

Уязвимость службы SysMain операционных систем Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 90%

0.05457

Низкий

7.8 High

CVSS3