CVE-2023-28251 | THREATINT

Home

Description

Windows Driver Revocation List Security Feature Bypass Vulnerability

PUBLISHED Reserved 2023-03-13 | Published 2023-05-09 | Updated 2025-07-10 | Assigner microsoft

MEDIUM: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

Problem types

Security Feature Bypass

Product status

10.0.17763.0 (custom) before 10.0.17763.4377

affected

10.0.0 (custom) before 10.0.17763.4377

affected

10.0.17763.0 (custom) before 10.0.17763.4377

affected

10.0.17763.0 (custom) before 10.0.17763.4377

affected

10.0.20348.0 (custom) before 10.0.20348.1726

affected

10.0.0 (custom) before 10.0.19042.2965

affected

10.0.0 (custom) before 10.0.22000.1936

affected

10.0.19043.0 (custom) before 10.0.19044.2965

affected

10.0.22621.0 (custom) before 10.0.22621.1702

affected

10.0.19045.0 (custom) before 10.0.19045.2965

affected

10.0.10240.0 (custom) before 10.0.10240.19926

affected

10.0.14393.0 (custom) before 10.0.14393.5921

affected

10.0.14393.0 (custom) before 10.0.14393.5921

affected

10.0.14393.0 (custom) before 10.0.14393.5921

affected

6.0.6003.0 (custom) before 6.0.6003.22070

affected

6.0.6003.0 (custom) before 6.0.6003.22070

affected

6.0.6003.0 (custom) before 6.0.6003.22070

affected

6.1.7601.0 (custom) before 6.1.7601.26519

affected

6.1.7601.0 (custom) before 6.1.7601.26519

affected

6.2.9200.0 (custom) before 6.2.9200.24266

affected

6.2.9200.0 (custom) before 6.2.9200.24266

affected

6.3.9600.0 (custom) before 6.3.9600.20969

affected

6.3.9600.0 (custom) before 6.3.9600.20969

affected

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28251 (Windows Driver Revocation List Security Feature Bypass Vulnerability) vendor-advisory

cve.org (CVE-2023-28251)

nvd.nist.gov (CVE-2023-28251)

Download JSON