CVE-2023-29364 | THREATINT

Assigner	microsoft
Reserved	2023-04-04
Published	2023-06-13
Updated	2024-08-02

Description

Windows Authentication Elevation of Privilege Vulnerability

HIGH: 7.0

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Problem types

CWE-190: Integer Overflow or Wraparound

Product status

10.0.0 before 10.0.17763.4499

affected

10.0.0 before 10.0.17763.4499

affected

10.0.0 before 10.0.17763.4499

affected

10.0.0 before 10.0.20348.1787

affected

10.0.0 before 10.0.20348.1784

affected

10.0.0 before 10.0.22000.2057

affected

10.0.0 before 10.0.19044.3086

affected

10.0.0 before 10.0.22621.1848

affected

10.0.0 before 10.0.19045.3086

affected

10.0.0 before 10.0.10240.19983

affected

10.0.0 before 10.0.14393.5989

affected

10.0.0 before 10.0.14393.5989

affected

10.0.0 before 10.0.14393.5989

affected

6.1.0 before 6.1.7601.26564

affected

6.0.0 before 6.1.7601.26564

affected

6.2.0 before 6.2.9200.24314

affected

6.2.0 before 6.2.9200.24314

affected

6.3.0 before 6.3.9600.21013

affected

6.3.0 before 6.3.9600.21013

affected

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29364 (Windows Authentication Elevation of Privilege Vulnerability) vendor-advisory

cve.org CVE-2023-29364

nvd.nist.gov CVE-2023-29364

Download JSON