CVE-2023-36903

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 8, 2023
Updated: May 29, 2024
CWE ID 59

Summary

CVE-2023-36903 is a newly discovered vulnerability affecting the Windows System Assessment Tool. This Elevation of Privilege (EoP) weakness allows an attacker to gain heightened system access by manipulating the tool's functionality. Successful exploitation could potentially give an attacker administrative control over the compromised system, posing a significant risk to data security and system integrity. Microsoft has released a patch to address this vulnerability, and users are strongly encouraged to install it promptly to protect against potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share