7.5

CVE-2023-36905

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
MicrosoftWindows 10 Version < 10.0.10240.20107
MicrosoftWindows 10 1607 Version < 10.0.14393.6167
MicrosoftWindows 10 1809 Version < 10.0.17763.4737
MicrosoftWindows 10 21h2 Version < 10.0.19044.3324
MicrosoftWindows 10 22h2 Version < 10.0.19045.3324
MicrosoftWindows 11 21h2 HwPlatformarm64 Version < 10.0.22000.2295
MicrosoftWindows 11 21h2 HwPlatformx64 Version < 10.0.22000.2295
MicrosoftWindows 11 22h2 HwPlatformarm64 Version < 10.0.22621.2134
MicrosoftWindows 11 22h2 HwPlatformx64 Version < 10.0.22621.2134
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.34% 0.874
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
secure@microsoft.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.