Summary
Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to coordinate an attack with another privileged process executed by another user in the system.
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.
What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.
Security updates
10.0.17763.4499 — https://support.microsoft.com/help/5027222
10.0.20348.1787 — https://support.microsoft.com/help/5027225
10.0.20348.1784 — https://support.microsoft.com/help/5027319
10.0.22000.2057 — https://support.microsoft.com/help/5027223
10.0.19044.3086 — https://support.microsoft.com/help/5027215
10.0.22621.1848 — https://support.microsoft.com/help/5027231
10.0.14393.5989 — https://support.microsoft.com/help/5027219
Vulnerabilities 1
-
Medium 4.7
Windows Kernel Information Disclosure Vulnerability
Windows Kernel Information Disclosure Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2023-32019 Windows Kernel Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32019
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss