Lucene search
HistoryMay 09, 2023 - 6:15 p.m.
CVE-2023-24900
cve-2023-24900
windows
security
provider
information disclosure
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.002
Percentile
53.7%
Windows NTLM Security Support Provider Information Disclosure Vulnerability
Affected configurations
Node
microsoftwindows_10_1507Range<10.0.10240.19926
ORmicrosoftwindows_10_1607Range<10.0.14393.5921
ORmicrosoftwindows_10_1809Range<10.0.17763.4377
ORmicrosoftwindows_10_20h2Range<10.0.19042.2965
ORmicrosoftwindows_10_21h2Range<10.0.19044.2965
ORmicrosoftwindows_10_22h2Range<10.0.19045.2965
ORmicrosoftwindows_11_21h2Range<10.0.22000.1936
ORmicrosoftwindows_11_22h2Range<10.0.22000.1702
ORmicrosoftwindows_server_2008Match-sp2
ORmicrosoftwindows_server_2008Matchr2sp1x64
ORmicrosoftwindows_server_2012Match-
ORmicrosoftwindows_server_2012Matchr2
ORmicrosoftwindows_server_2016Match-
ORmicrosoftwindows_server_2019Match-
ORmicrosoftwindows_server_2022Match-
Related
prion
prion
Information disclosure
2023-05-09 18:15:00
cvelist
cvelist
cve
cve
CVE-2023-24900
2023-05-09 18:15:12
mscve
mscve
Windows NTLM Security Support Provider Information Disclosure Vulnerability
2023-05-09 07:00:00
mskb
mskb
May 9, 2023âKB5026427 (Security-only update)
2023-05-09 07:00:00
May 9, 2023âKB5026408 (Monthly Rollup)
2023-05-09 07:00:00
May 9, 2023âKB5026413 (Monthly Rollup)
2023-05-09 07:00:00
nessus
nessus
KB5026427: Windows Server 2008 Security Update (May 2023)
2023-05-09 00:00:00
KB5026426: Windows Server 2008 R2 Security Update (May 2023)
2023-05-09 00:00:00
KB5026382: Windows 10 LTS 1507 Security Update (May 2023)
2023-05-09 00:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5026382)
2023-05-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5026368)
2023-07-19 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5026361)
2023-05-10 00:00:00
kaspersky
kaspersky
KLA49156 Multiple vulnerabilities in Microsoft Products (ESU)
2023-05-09 00:00:00
KLA49154 Multiple vulnerabilities in Microsoft Windows
2023-05-09 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - May 2023
2023-05-09 20:02:02
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.002
Percentile
53.7%
Related for NVD:CVE-2023-24900