CVE Catalog
CVE-2023-35326
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.51%
40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability in Windows CDP User Components allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive data.
Risk Assessment
Information disclosure may lead to privacy breaches for users and potential attacks on the organization's systems. Sensitive data could be used in further attacks.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability. Additionally, monitoring access to sensitive data is advised.
Original NVD description (English source)
Windows CDP User Components Information Disclosure Vulnerability