CVE-2023-35312

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jul 11, 2023
Updated: May 29, 2024
CWE ID 190

Summary

CVE-2023-35312 is an elevation of privilege vulnerability impacting Microsoft's VOLSNAP.SYS driver. Successful exploitation of this vulnerability allows an attacker to gain higher system privileges, potentially enabling them to install programs, modify data, or create new accounts with administrative rights. This issue primarily affects Microsoft Windows operating systems and necessitates immediate patching to mitigate the risk of unauthorized access and potential data breaches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share