High MSRC-CVE-2023-35629 1 CVE

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

Published Dec 12, 2023 · Updated Dec 12, 2023

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
10.0.10240.20345 — https://support.microsoft.com/help/5033379
6.0.6003.22413 — https://support.microsoft.com/help/5033422
6.0.6003.22413 — https://support.microsoft.com/help/5033427
6.1.7601.26864 — https://support.microsoft.com/help/5033433
6.1.7601.26864 — https://support.microsoft.com/help/5033424
6.2.9200.24614 — https://support.microsoft.com/help/5033429
6.3.9600.21715 — https://support.microsoft.com/help/5033420

Vulnerabilities 1

Medium 6.8

CVE-2023-35629

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

Microsoft Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 Windows

Dec 12, 2023

Revision history

2023-12-12 #1
Information published.

References

CVE-2023-35629 Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35629
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss