Lucene search

K
mscveMicrosoftMS:CVE-2023-28235
HistoryApr 11, 2023 - 7:00 a.m.

Windows Lock Screen Security Feature Bypass Vulnerability

2023-04-1107:00:00
Microsoft
msrc.microsoft.com
33
windows
lock screen
security
bypass
vulnerability
microsoft

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

42.1%

Affected configurations

Vulners
Node
microsoftwindows_10_2004_for_32-bit_systemsRange<10.0.19045.2846
OR
microsoftwindows_10_22h2Range<10.0.19045.2846arm64
OR
microsoftwindows_10_1903_for_x64-based_systemsRange<10.0.19045.2846
OR
microsoftwindows_10_1903_for_x64-based_systemsRange<10.0.19044.2846
OR
microsoftwindows_10_21h2Range<10.0.19044.2846arm64
OR
microsoftwindows_10_2004_for_32-bit_systemsRange<10.0.19044.2846
OR
microsoftwindows_10_20h2Range<10.0.19042.2846arm64
OR
microsoftwindows_10_2004_for_32-bit_systemsRange<10.0.19042.2846
OR
microsoftwindows_server\,_1803_\(server_core_installation\)Range<10.0.17763.4252
OR
microsoftwindows_server_2019Range<10.0.17763.4252
OR
microsoftwindows_10_1809_for_arm64-based_systemsRange<10.0.17763.4252
OR
microsoftwindows_10_1809_for_x64-based_systemsRange<10.0.17763.4252
OR
microsoftwindows_10_1809_for_32-bit_systemsRange<10.0.17763.4252

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

42.1%