We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-35384

Windows HTML Platforms Security Feature Bypass Vulnerability



Assignermicrosoft
Reserved2023-06-14
Published2023-08-08
Updated2024-08-02

Description

Windows HTML Platforms Security Feature Bypass Vulnerability



MEDIUM: 5.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C

Problem types

CWE-73: External Control of File Name or Path

Product status

10.0.0 before 10.0.17763.4737
affected

10.0.0 before 10.0.17763.4737
affected

10.0.0 before 10.0.17763.4737
affected

10.0.0 before 10.0.20348.1906
affected

10.0.0 before 10.0.20348.1903
affected

10.0.0 before 10.0.22000.2295
affected

10.0.0 before 10.0.19044.3324
affected

10.0.0 before 10.0.22621.2134
affected

10.0.0 before 10.0.19045.3324
affected

10.0.0 before 10.0.10240.20107
affected

10.0.0 before 10.0.14393.6167
affected

10.0.0 before 10.0.14393.6167
affected

10.0.0 before 10.0.14393.6167
affected

6.3.0 before 6.3.9600.21503
affected

6.3.0 before 10.0.0.0
affected

6.3.0 before 6.3.9600.21503
affected

6.3.0 before 10.0.0.0
affected

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35384 (Windows HTML Platforms Security Feature Bypass Vulnerability) vendor-advisory

cve.org CVE-2023-35384

nvd.nist.gov CVE-2023-35384

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.