Lucene search

PRIOn knowledge basePRION:CVE-2023-35308

HistoryJul 11, 2023 - 6:15 p.m.

Security feature bypass

2023-07-1118:15:00

PRIOn knowledge base

www.prio-n.com

windows mshtml platform

security feature bypass

vulnerability

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

6.5 Medium

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

36.9%

JSON

Windows MSHTML Platform Security Feature Bypass Vulnerability

CPENameOperatorVersion
windows_10_1507lt10.0.10240.20048
windows_10_1607lt10.0.14393.6085
windows_10_1809lt10.0.17763.4645
windows_10_21h2lt10.0.19041.3208
windows_10_22h2lt10.0.19045.3208
windows_11_21h2lt10.0.22000.2176
windows_11_22h2lt10.0.22621.1992
windows_server_2012eq2.0.114

Name	Operator	Version
windows_10_1507	lt	10.0.10240.20048
windows_10_1607	lt	10.0.14393.6085
windows_10_1809	lt	10.0.17763.4645
windows_10_21h2	lt	10.0.19041.3208
windows_10_22h2	lt	10.0.19045.3208
windows_11_21h2	lt	10.0.22000.2176
windows_11_22h2	lt	10.0.22621.1992
windows_server_2012	eq	2.0.114

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35308

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

6.5 Medium

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

36.9%

JSON

Related for PRION:CVE-2023-35308