CVE-2023-35306
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
Risk Assessment
Information disclosure could lead to privacy breaches and data security issues within the organization. Potential consequences include data theft or misuse.
Recommendation
It is recommended to update the printer drivers to the latest version to mitigate the risks associated with this vulnerability. Additionally, monitor access to printing systems.
Other vulnerabilities in Microsoft PostScript and PCL6 Class Printer Driver
See all- CVE-2023-35324Medium
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive data.
- CVE-2023-35302High
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for remote code execution. An attacker can exploit this flaw to gain control over the system where the vulnerable driver is installed.
- CVE-2023-35296Medium
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure.
- CVE-2023-21801High
Remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Could allow arbitrary code execution.
- CVE-2023-21693Medium
Information Disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Could allow unauthorized access to data.
- CVE-2023-21684High
Remote Code Execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. An attacker could exploit this vulnerability to run arbitrary code on the target system.
Original NVD description (English source)
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS