CVE Catalog

CVE-2023-35306

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.51%

40th percentile - higher than 40% of all known CVEs

Summary

A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.

Risk Assessment

Information disclosure could lead to privacy breaches and data security issues within the organization. Potential consequences include data theft or misuse.

Recommendation

It is recommended to update the printer drivers to the latest version to mitigate the risks associated with this vulnerability. Additionally, monitor access to printing systems.

Original NVD description (English source)

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS