CVE-2023-35296
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk67th percentile - higher than 67% of all known CVEs
Summary
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure.
Risk Assessment
An attacker could gain access to sensitive data, potentially leading to privacy and security breaches within the organization.
Recommendation
It is recommended to update the printer drivers to the latest version to mitigate the risk of information disclosure.
Other vulnerabilities in Microsoft PostScript and PCL6 Class Printer Driver
See all- CVE-2023-35324Medium
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive data.
- CVE-2023-35306Medium
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
- CVE-2023-35302High
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for remote code execution. An attacker can exploit this flaw to gain control over the system where the vulnerable driver is installed.
- CVE-2023-21801High
Remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Could allow arbitrary code execution.
- CVE-2023-21693Medium
Information Disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Could allow unauthorized access to data.
- CVE-2023-21684High
Remote Code Execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. An attacker could exploit this vulnerability to run arbitrary code on the target system.
Original NVD description (English source)
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS