CVE-2023-29364 | THREATINT

Home

Description

Windows Authentication Elevation of Privilege Vulnerability

PUBLISHED Reserved 2023-04-04 | Published 2023-06-13 | Updated 2025-01-01 | Assigner microsoft

HIGH: 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Problem types

CWE-190: Integer Overflow or Wraparound

Product status

10.0.17763.0 (custom) before 10.0.17763.4499

affected

10.0.0 (custom) before 10.0.17763.4499

affected

10.0.17763.0 (custom) before 10.0.17763.4499

affected

10.0.17763.0 (custom) before 10.0.17763.4499

affected

10.0.20348.0 (custom) before 10.0.20348.1787

affected

10.0.0 (custom) before 10.0.22000.2057

affected

10.0.19043.0 (custom) before 10.0.19044.3086

affected

10.0.22621.0 (custom) before 10.0.22621.1848

affected

10.0.19045.0 (custom) before 10.0.19045.3086

affected

10.0.10240.0 (custom) before 10.0.10240.19983

affected

10.0.14393.0 (custom) before 10.0.14393.5989

affected

10.0.14393.0 (custom) before 10.0.14393.5989

affected

10.0.14393.0 (custom) before 10.0.14393.5989

affected

6.1.7601.0 (custom) before 6.1.7601.26564

affected

6.1.7601.0 (custom) before 6.1.7601.26564

affected

6.2.9200.0 (custom) before 6.2.9200.24314

affected

6.2.9200.0 (custom) before 6.2.9200.24314

affected

6.3.9600.0 (custom) before 6.3.9600.21013

affected

6.3.9600.0 (custom) before 6.3.9600.21013

affected

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29364 (Windows Authentication Elevation of Privilege Vulnerability) vendor-advisory

cve.org (CVE-2023-29364)

nvd.nist.gov (CVE-2023-29364)

Download JSON