Description
Windows HTML Platforms Security Feature Bypass Vulnerability
Reserved 2023-06-14 | Published 2023-08-08 | Updated 2025-01-01 | Assigner
microsoftMEDIUM: 5.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C
Problem types
CWE-73: External Control of File Name or Path
Product status
10.0.17763.0 before 10.0.17763.4737
affected
10.0.0 before 10.0.17763.4737
affected
10.0.17763.0 before 10.0.17763.4737
affected
10.0.17763.0 before 10.0.17763.4737
affected
10.0.20348.0 before 10.0.20348.1906
affected
10.0.0 before 10.0.22000.2295
affected
10.0.19043.0 before 10.0.19044.3324
affected
10.0.22621.0 before 10.0.22621.2134
affected
10.0.19045.0 before 10.0.19045.3324
affected
10.0.10240.0 before 10.0.10240.20107
affected
10.0.14393.0 before 10.0.14393.6167
affected
10.0.14393.0 before 10.0.14393.6167
affected
10.0.14393.0 before 10.0.14393.6167
affected
6.3.9600.0 before 6.3.9600.21503
affected
6.3.9600.0 before 6.3.9600.21503
affected
References
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35384 (Windows HTML Platforms Security Feature Bypass Vulnerability) vendor-advisory
cve.org (CVE-2023-35384)
nvd.nist.gov (CVE-2023-35384)
Download JSON