What is CVE-2023-35347?

CVE-2023-35347 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Install Service Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2023-35347 cover?

CVE-2023-35347 covers the following CVE IDs: CVE-2023-35347. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2023-35347?

CVE-2023-35347 has a CVSS v3 base score of 7.1, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2023-35347?

CVE-2023-35347 affects 12 products, including: Windows 10 Version 21H2 for 32-bit Systems; Windows 10 Version 21H2 for ARM64-based Systems; Windows 10 Version 21H2 for x64-based Systems; Windows 10 Version 22H2 for 32-bit Systems; Windows 10 Version 22H2 for ARM64-based Systems; and others — see the full list on the advisory page.

CVE-2023-35347HighCVSS 7.1

Microsoft Install Service Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

July 11, 2023

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2023-35347 →

📋 Description

What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

According to the CVSS metrics, successful exploitation of this vulnerability does not impact confidentiality (C:N) but has major impact on integrity (I:H) and availability (A:H). What does that mean for this vulnerability? An attacker who successfully exploits this vulnerability cannot access files but can overwrite their contents and potentially cause the service to become unavailable.

🎯 Affected products12

Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems
Windows 11 Version 22H2 for ARM64-based Systems
Windows 11 Version 22H2 for x64-based Systems
Windows 11 version 21H2 for ARM64-based Systems
Windows 11 version 21H2 for x64-based Systems
Windows Server 2022
Windows Server 2022 (Server Core installation)

✅ Remediation

KB5028171 (Security Update) — fixed build 10.0.20348.1850 KB5028182 (Security Update) — fixed build 10.0.22000.2176 KB5028166 (Security Update) — fixed build 10.0.19044.3208 KB5028185 (Security Update) — fixed build 10.0.22621.1992 KB5028166 (Security Update) — fixed build 10.0.19045.3208

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products12

✅ Remediation

🔗 References (9)