What is CVE-2023-35356?

CVE-2023-35356 is a high-severity software vulnerability (CWE-843) with a CVSS score of 7.8. Windows Kernel Elevation of Privilege Vulnerability

Is CVE-2023-35356 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

Tracked products affected include Windows Server 2022. Check the version you run to see whether it is affected.

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

HIGH severity · CVSS 7.8 · CWE-843

7.8CVSS HIGH

Windows Kernel Elevation of Privilege Vulnerability

Attack vectorLocal

Attack complexityLow

Privileges requiredLow

User interactionNone

Confidentiality impactHigh

Integrity impactHigh

Availability impactHigh

Exploit probability (EPSS)1%

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Apply the vendor fix promptly. Open any affected product above for its exact safe version.