CVE-2023-35320

Summary

CVE-2023-35320 is an elevation of privilege vulnerability affecting Connected User Experiences and Telemetry (CUXT). An attacker who successfully exploits this flaw can escalate their privileges, potentially gaining control over affected systems. This vulnerability poses a significant risk to organizations, as CUXT is a widely used component in Microsoft products, including Windows and Office applications. Successful exploitation could lead to data theft, unauthorized system access, or even the installation of malware. Mitigations include applying available patches and implementing strong access controls.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.