Lucene search

K
nvd[email protected]NVD:CVE-2023-38140
HistorySep 12, 2023 - 5:15 p.m.

CVE-2023-38140

2023-09-1217:15:16
CWE-908
web.nvd.nist.gov
1
cve-2023-38140
windows
kernel
information
disclosure
vulnerability

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%

Windows Kernel Information Disclosure Vulnerability

Affected configurations

NVD
Node
microsoftwindows_10_1607Range<10.0.14393.6252
OR
microsoftwindows_10_1809Range<10.0.17763.4851
OR
microsoftwindows_10_21h2Range<10.0.19045.3448
OR
microsoftwindows_10_22h2Range<10.0.19045.3448
OR
microsoftwindows_11_21h2Range<10.0.22000.2416
OR
microsoftwindows_server_2016Match-
OR
microsoftwindows_server_2019Match-
OR
microsoftwindows_server_2022Match-

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%