Home

Description

Windows Kernel Information Disclosure Vulnerability

PUBLISHED Reserved 2023-06-27 | Published 2023-09-12 | Updated 2025-10-30 | Assigner microsoft




MEDIUM: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Problem types

CWE-126: Buffer Over-read

Product status

10.0.17763.0 (custom) before 10.0.17763.4851
affected

10.0.0 (custom) before 10.0.17763.4851
affected

10.0.17763.0 (custom) before 10.0.17763.4851
affected

10.0.17763.0 (custom) before 10.0.17763.4851
affected

10.0.20348.0 (custom) before 10.0.20348.1970
affected

10.0.0 (custom) before 10.0.22000.2416
affected

10.0.19043.0 (custom) before 10.0.19044.3448
affected

10.0.22621.0 (custom) before 10.0.22621.2283
affected

10.0.19045.0 (custom) before 10.0.19045.3448
affected

10.0.14393.0 (custom) before 10.0.14393.6252
affected

10.0.14393.0 (custom) before 10.0.14393.6252
affected

10.0.14393.0 (custom) before 10.0.14393.6252
affected

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36803 (Windows Kernel Information Disclosure Vulnerability) vendor-advisory

packetstormsecurity.com/...unds-Reads-Memory-Disclosure.html

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36803 (Windows Kernel Information Disclosure Vulnerability) vendor-advisory

cve.org (CVE-2023-36803)

nvd.nist.gov (CVE-2023-36803)