CVE-2023-35324
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive data.
Risk Assessment
Information disclosure may lead to a breach of data confidentiality within the organization. Potential exploitation of this vulnerability could result in loss of customer trust.
Recommendation
It is recommended to update the printer drivers to the latest version to minimize the risk associated with this vulnerability.
Other vulnerabilities in Microsoft PostScript and PCL6 Class Printer Driver
See all- CVE-2023-35306Medium
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
- CVE-2023-35302High
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for remote code execution. An attacker can exploit this flaw to gain control over the system where the vulnerable driver is installed.
- CVE-2023-35296Medium
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure.
- CVE-2023-21801High
Remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Could allow arbitrary code execution.
- CVE-2023-21693Medium
Information Disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Could allow unauthorized access to data.
- CVE-2023-21684High
Remote Code Execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. An attacker could exploit this vulnerability to run arbitrary code on the target system.
Original NVD description (English source)
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS