CVE-2023-32056

CVSS v3.1 9.8 (Critical)

EPSS 0.22 % (60^th)

Affected Products 7

Advisories 1

NVD Status Modified

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Weaknesses

CWE-59: Improper Link Resolution Before File Access ('Link Following')
CWE-NVD-noinfo

CVE Status: PUBLISHED
NVD Status: Modified
CNA: Microsoft Corporation
Published Date: 2023-07-11 18:15:13
(14 months ago)
Updated Date: 2024-05-29 03:15:43
(3 months ago)

Affected Products

Microsoft

Configuration #1

		CPE23	From	Up To
	Microsoft Windows 10 1809 prior 10.0.17763.4645 version	cpe:2.3:o:microsoft:windows_10_1809		< 10.0.17763.4645
	Microsoft Windows 10 21h2 prior 10.0.19041.3208 version	cpe:2.3:o:microsoft:windows_10_21h2		< 10.0.19041.3208
	Microsoft Windows 10 22h2 prior 10.0.19045.3208 version	cpe:2.3:o:microsoft:windows_10_22h2		< 10.0.19045.3208
	Microsoft Windows 11 21h2 prior 10.0.22000.2176 version	cpe:2.3:o:microsoft:windows_11_21h2		< 10.0.22000.2176
	Microsoft Windows 11 22h2 prior 10.0.22621.1992 version	cpe:2.3:o:microsoft:windows_11_22h2		< 10.0.22621.1992
	Microsoft Windows Server 2019	cpe:2.3:o:microsoft:windows_server_2019:-
	Microsoft Windows Server 2022	cpe:2.3:o:microsoft:windows_server_2022:-