CVE-2023-35347

Summary

CVE-2023-35347 is an elevation of privilege vulnerability affecting Microsoft Installer Service. Attackers can exploit this vulnerability by installing a malicious software package through the Microsoft Installer Service, which could result in the execution of arbitrary code with administrative privileges. This can lead to serious security implications, including data theft or unauthorized system modifications. Microsoft strongly recommends installing the available patch as soon as possible to mitigate this risk. In summary, CVE-2023-35347 refers to an elevation of privilege issue in Microsoft Installer Service, where an attacker can install malicious software and execute it with administrative privileges, potentially leading to severe data breaches and unauthorized system modifications. Installing the available patch is crucial to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.