CVE-2023-29346 | THREATINT

Assigner	microsoft
Reserved	2023-04-04
Published	2023-06-13
Updated	2024-08-02

Description

NTFS Elevation of Privilege Vulnerability

HIGH: 7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Problem types

CWE-681: Incorrect Conversion between Numeric Types

Product status

10.0.0 before 10.0.17763.4499

affected

10.0.0 before 10.0.17763.4499

affected

10.0.0 before 10.0.17763.4499

affected

10.0.0 before 10.0.20348.1787

affected

10.0.0 before 10.0.20348.1784

affected

10.0.0 before 10.0.22000.2057

affected

10.0.0 before 10.0.19044.3086

affected

10.0.0 before 10.0.22621.1848

affected

10.0.0 before 10.0.19045.3086

affected

10.0.0 before 10.0.10240.19983

affected

10.0.0 before 10.0.14393.5989

affected

10.0.0 before 10.0.14393.5989

affected

10.0.0 before 10.0.14393.5989

affected

6.0.0 before 6.0.6003.22113

affected

6.0.0 before 6.0.6003.22113

affected

6.0.0 before 6.0.6003.22113

affected

6.1.0 before 6.1.7601.26564

affected

6.0.0 before 6.1.7601.26564

affected

6.2.0 before 6.2.9200.24314

affected

6.2.0 before 6.2.9200.24314

affected

6.3.0 before 6.3.9600.21013

affected

6.3.0 before 6.3.9600.21013

affected

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29346 (NTFS Elevation of Privilege Vulnerability) vendor-advisory

cve.org CVE-2023-29346

nvd.nist.gov CVE-2023-29346

Download JSON