CVE-2023-28251 | THREATINT

Assigner	microsoft
Reserved	2023-03-13
Published	2023-05-09
Updated	2024-10-03

Description

Windows Driver Revocation List Security Feature Bypass Vulnerability

MEDIUM: 5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

Problem types

Security Feature Bypass

Product status

10.0.0 before 10.0.17763.4377

affected

10.0.0 before 10.0.17763.4377

affected

10.0.0 before 10.0.17763.4377

affected

10.0.0 before 10.0.20348.1726

affected

10.0.0 before 10.0.20348.1724

affected

10.0.0 before 10.0.19042.2965

affected

10.0.0 before 10.0.22000.1936

affected

10.0.0 before 10.0.19044.2965

affected

10.0.0 before 10.0.22621.1702

affected

10.0.0 before 10.0.19045.2965

affected

10.0.0 before 10.0.10240.19926

affected

10.0.0 before 10.0.14393.5921

affected

10.0.0 before 10.0.14393.5921

affected

10.0.0 before 10.0.14393.5921

affected

6.0.0 before 6.0.6003.22070

affected

6.0.0 before 6.0.6003.22070

affected

6.0.0 before 6.0.6003.22070

affected

6.1.0 before 6.1.7601.26519

affected

6.0.0 before 6.1.7601.26519

affected

6.2.0 before 6.2.9200.24266

affected

6.2.0 before 6.2.9200.24266

affected

6.3.0 before 6.3.9600.20969

affected

6.3.0 before 6.3.9600.20969

affected

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28251 (Windows Driver Revocation List Security Feature Bypass Vulnerability) vendor-advisory

cve.org CVE-2023-28251

nvd.nist.gov CVE-2023-28251

Download JSON