CVE-2023-35380

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Aug 8, 2023
Updated: May 29, 2024
CWE ID 416

Summary

CVE-2023-35380 is a Windows Kernel elevation of privilege vulnerability (EoP). An attacker who successfully exploits this vulnerability can gain elevated privileges on an affected system. This issue exists due to improper handling of objects in the Windows Kernel. Exploitation of this vulnerability could lead to the installation of malware or unauthorized access to sensitive information. Microsoft has released a security update to address this issue, and it is recommended that all Windows users install the patch as soon as possible to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share