CVE-2023-36036

Published Nov 14, 2023

Last updated 3 months ago

Overview

Description
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Source
secure@microsoft.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Known exploits

Data from CISA

Vulnerability name
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability
Exploit added on
Nov 14, 2023
Exploit action due
Dec 5, 2023
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

nvd@nist.gov
CWE-787
secure@microsoft.com
CWE-122

Social media

Hype score
Not currently trending

Configurations