CVE-2023-35320 - Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Back Back to CVE browser

HIGH

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Published Jul 11, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.46%

Description

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Affected products

Vendor Microsoft Product Windows 10 Version 1607 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.14393.6085
Vendor Microsoft Product Windows 10 Version 1809 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.17763.4645
Vendor Microsoft Product Windows 10 Version 21H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19044.3208
Vendor Microsoft Product Windows 10 Version 22H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19045.3208
Vendor Microsoft Product Windows 11 version 21H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.22000.2176
Vendor Microsoft Product Windows 11 version 22H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.22621.1992
Vendor Microsoft Product Windows Server 2016 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.14393.6085
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.14393.6085
Vendor Microsoft Product Windows Server 2019 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.17763.4645
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.17763.4645
Vendor Microsoft Product Windows Server 2022 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.20348.1850

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows 10 Version 1607

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.14393.6085

Microsoft

Windows 10 Version 1809

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.17763.4645

Microsoft

Windows 10 Version 21H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19044.3208

Microsoft

Windows 10 Version 22H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19045.3208

Microsoft

Windows 11 version 21H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.22000.2176

Microsoft

Windows 11 version 22H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.22621.1992

Microsoft

Windows Server 2016

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.14393.6085

Microsoft

Windows Server 2016 (Server Core installation)

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.14393.6085

Microsoft

Windows Server 2019

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.17763.4645

Microsoft

Windows Server 2019 (Server Core installation)

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.17763.4645

Microsoft

Windows Server 2022

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.20348.1850

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-59

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39323
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35320
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-39323		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35320		vendor-advisoryPatchVendor Advisory