CVE-2023-28247HighCVSS 7.5
Windows Network File System Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.
🎯 Affected products10
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
✅ Remediation
KB5025229 (Security Update) — fixed build 10.0.17763.4252 KB5025230 (Security Update) — fixed build 10.0.20348.1668 KB5025228 (Security Update) — fixed build 10.0.14393.5850 KB5025287 (Monthly Rollup) — fixed build 6.2.9200.24216 KB5025272 (Security Only) — fixed build 6.2.9200.24216 KB5025285 (Monthly Rollup) — fixed build 6.3.9600.20919 KB5025288 (Security Only) — fixed build 6.3.9600.20919
🔗 References (10)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28247
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5025229
- referencehttps://support.microsoft.com/help/5025229
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5025230
- referencehttps://support.microsoft.com/help/5025230
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5025228
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5025287
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5025272
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5025285
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5025288