CVE-2023-35382

Summary

CVE-2023-35382 is a newly disclosed Microsoft Windows vulnerability that allows an attacker to elevate their privileges within the Windows Kernel. By exploiting this vulnerability, an attacker can gain higher-level access to a system, potentially leading to the theft of sensitive information or the installation of malware. This issue can be exploited remotely, making it particularly dangerous. Microsoft has not yet released a patch for this vulnerability, leaving affected systems vulnerable to attack. It is recommended that organizations apply best security practices, such as firewalls and intrusion prevention systems, until a patch becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.