6.5

CVE-2023-24883

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MicrosoftWindows 10 1507 Version < 10.0.10240.19869
MicrosoftWindows 10 1607 Version < 10.0.14393.5850
MicrosoftWindows 10 1809 Version < 10.0.17763.4252
MicrosoftWindows 10 20h2 Version < 10.0.19042.2846
MicrosoftWindows 10 21h2 Version < 10.0.19044.2846
MicrosoftWindows 10 22h2 Version < 10.0.19045.2846
MicrosoftWindows 11 21h2 Version < 10.0.22000.1817
MicrosoftWindows 11 22h2 Version < 10.0.22621.1555
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 12.63% 0.94
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
secure@microsoft.com 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.