CVE-2023-32040 - Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Back Back to CVE browser

MEDIUM

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Published Jul 11, 2023

5.5

MEDIUM

CVSS 3.1

EPSS 0.52%

Description

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Affected products

Vendor Microsoft Product Windows 10 Version 1507 Default
unknown
Affected
- ≥ 10.0.10240.0, < 10.0.10240.20048
Vendor Microsoft Product Windows 10 Version 1607 Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.6085
Vendor Microsoft Product Windows 10 Version 1809 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.17763.4645
- ≥ 10.0.17763.0, < 10.0.17763.4645
Vendor Microsoft Product Windows 10 Version 21H2 Default
unknown
Affected
- ≥ 10.0.19043.0, < 10.0.19044.3208
Vendor Microsoft Product Windows 10 Version 22H2 Default
unknown
Affected
- ≥ 10.0.19045.0, < 10.0.19045.3208
Vendor Microsoft Product Windows 11 version 21H2 Default
unknown
Affected
- ≥ 10.0.0, < 10.0.22000.2176
Vendor Microsoft Product Windows 11 version 22H2 Default
unknown
Affected
- ≥ 10.0.22621.0, < 10.0.22621.1992
Vendor Microsoft Product Windows Server 2012 Default
unknown
Affected
- ≥ 6.2.9200.0, < 6.2.9200.24374
Vendor Microsoft Product Windows Server 2012 (Server Core installation) Default
unknown
Affected
- ≥ 6.2.9200.0, < 6.2.9200.24374
Vendor Microsoft Product Windows Server 2012 R2 Default
unknown
Affected
- ≥ 6.3.9600.0, < 6.3.9600.21063
Vendor Microsoft Product Windows Server 2012 R2 (Server Core installation) Default
unknown
Affected
- ≥ 6.3.9600.0, < 6.3.9600.21063
Vendor Microsoft Product Windows Server 2016 Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.6085
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.14393.0, < 10.0.14393.6085
Vendor Microsoft Product Windows Server 2019 Default
unknown
Affected
- ≥ 10.0.17763.0, < 10.0.17763.4645
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
unknown
Affected
- ≥ 10.0.17763.0, < 10.0.17763.4645
Vendor Microsoft Product Windows Server 2022 Default
unknown
Affected
- ≥ 10.0.20348.0, < 10.0.20348.1850

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Windows 10 Version 1507	unknown	Affected ≥ 10.0.10240.0, < 10.0.10240.20048
Microsoft	Windows 10 Version 1607	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.6085
Microsoft	Windows 10 Version 1809	unknown	Affected ≥ 10.0.0, < 10.0.17763.4645 ≥ 10.0.17763.0, < 10.0.17763.4645
Microsoft	Windows 10 Version 21H2	unknown	Affected ≥ 10.0.19043.0, < 10.0.19044.3208
Microsoft	Windows 10 Version 22H2	unknown	Affected ≥ 10.0.19045.0, < 10.0.19045.3208
Microsoft	Windows 11 version 21H2	unknown	Affected ≥ 10.0.0, < 10.0.22000.2176
Microsoft	Windows 11 version 22H2	unknown	Affected ≥ 10.0.22621.0, < 10.0.22621.1992
Microsoft	Windows Server 2012	unknown	Affected ≥ 6.2.9200.0, < 6.2.9200.24374
Microsoft	Windows Server 2012 (Server Core installation)	unknown	Affected ≥ 6.2.9200.0, < 6.2.9200.24374
Microsoft	Windows Server 2012 R2	unknown	Affected ≥ 6.3.9600.0, < 6.3.9600.21063
Microsoft	Windows Server 2012 R2 (Server Core installation)	unknown	Affected ≥ 6.3.9600.0, < 6.3.9600.21063
Microsoft	Windows Server 2016	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.6085
Microsoft	Windows Server 2016 (Server Core installation)	unknown	Affected ≥ 10.0.14393.0, < 10.0.14393.6085
Microsoft	Windows Server 2019	unknown	Affected ≥ 10.0.17763.0, < 10.0.17763.4645
Microsoft	Windows Server 2019 (Server Core installation)	unknown	Affected ≥ 10.0.17763.0, < 10.0.17763.4645
Microsoft	Windows Server 2022	unknown	Affected ≥ 10.0.20348.0, < 10.0.20348.1850

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-822

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36327
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32040
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36327		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32040		vendor-advisoryPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jul 11, 2023

Updated Feb 28, 2025

Reserved May 1, 2023

Link CVE-2023-32040

CISA Vulnrichment

Updated Feb 28, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-32040

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Jul 11, 2023

Updated Feb 28, 2025

Link EUVD-2023-36327

GitHub

No data