CVE-2023-35644
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-35644 is a Windows Sysmain Service Elevation of Privilege vulnerability. It affects multiple products including 's-pbK-', 'tEjSCW', 's-pbK_', 'tEjSCX', and others. The vulnerability has a base severity of HIGH and a base score of 7.8. The exploitability score is 1.8, indicating a low level of difficulty for exploitation. The privileges required for exploitation are low, and there is no user interaction required. The attack vector is local, posing a potential danger to organizations with compromised systems. The integrity and confidentiality impacts are both high, with an impact score of 5.9. The availability impact is also high. Remediation measures have not been mentioned in the provided information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions