Lucene search

K
mscveMicrosoftMS:CVE-2023-35632
HistoryDec 12, 2023 - 8:00 a.m.

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

2023-12-1208:00:00
Microsoft
msrc.microsoft.com
7
windows ancillary function
driver
privilege vulnerability
winsock
elevation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

32.1%

Affected configurations

Vulners
Node
microsoftwindows_server_2008Range<6.1.7601.26864r2x64
OR
microsoftwindows_server_2008Range<6.1.7601.26864r2x64
OR
microsoftwindows_server_2012Range<6.3.9600.21715r2
OR
microsoftwindows_server_2012Range<6.3.9600.21715r2
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<6.2.9200.24614
OR
microsoftwindows_server_2012Range<6.2.9200.24614
OR
microsoftwindows_server_2008Range<6.1.7601.26864r2x64
OR
microsoftwindows_server_2008Range<6.1.7601.26864r2x64
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<10.0.14393.6529
OR
microsoftwindows_server_2016Range<10.0.14393.6529
OR
microsoftwindows_defender_on_windows_10_1607_for_x64-based_systemsRange<10.0.14393.6529
OR
microsoftwindows_defender_on_windows_10_1607_for_32-bit_systemsRange<10.0.14393.6529
OR
microsoftwindows_10_1903_for_x64-based_systemsRange<10.0.10240.20345
OR
microsoftwindows_10_2004_for_32-bit_systemsRange<10.0.10240.20345
OR
microsoftwindows_10_2004_for_32-bit_systemsRange<10.0.19045.3803
OR
microsoftwindows_10_22h2Range<10.0.19045.3803arm64
OR
microsoftwindows_10_1903_for_x64-based_systemsRange<10.0.19045.3803
OR
microsoftwindows_10_1903_for_x64-based_systemsRange<10.0.19044.3803
OR
microsoftwindows_10_21h2Range<10.0.19041.3803arm64
OR
microsoftwindows_10_2004_for_32-bit_systemsRange<10.0.19044.3803
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<10.0.17763.5206
OR
microsoftwindows_server_2019Range<10.0.17763.5206
OR
microsoftwindows_10_1809_for_arm64-based_systemsRange<10.0.17763.5206
OR
microsoftwindows_10_1809_for_x64-based_systemsRange<10.0.17763.5206
OR
microsoftwindows_10_1809_for_32-bit_systemsRange<10.0.17763.5206

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

32.1%