Описание
Windows Inventory Backup Information Disclosure Vulnerability
Use of externally-controlled format string in Windows Inventory Backup allows an authorized attacker to disclose information locally.
FAQ
What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could potentially read small portions of stack memory.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Windows 10 Version 21H2 for 32-bit Systems | ||
| Windows 10 Version 21H2 for ARM64-based Systems | ||
| Windows 10 Version 21H2 for x64-based Systems | ||
| Windows 10 Version 22H2 for x64-based Systems | ||
| Windows 10 Version 22H2 for ARM64-based Systems | ||
| Windows 10 Version 22H2 for 32-bit Systems | ||
| Windows 11 Version 23H2 for ARM64-based Systems | ||
| Windows 11 Version 23H2 for x64-based Systems | ||
| Windows 11 Version 24H2 for ARM64-based Systems | ||
| Windows 11 Version 24H2 for x64-based Systems |
Показывать по
10
Возможность эксплуатации
Publicly Disclosed
No
Exploited
No
Latest Software Release
Exploitation Less Likely
EPSS
Процентиль: 40%
0.00451
Низкий
5.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.5
nvd
3 дня назад
Use of externally-controlled format string in Windows Inventory Backup allows an authorized attacker to disclose information locally.
CVSS3: 5.5
github
3 дня назад
Use of externally-controlled format string in Windows Inventory Backup allows an authorized attacker to disclose information locally.
EPSS
Процентиль: 40%
0.00451
Низкий
5.5 Medium
CVSS3