CVE Catalog

CVE-2023-35336

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.83%

53th percentile - higher than 53% of all known CVEs

Summary

A vulnerability in the MSHTML platform security feature in Windows allows for a security bypass. An attacker can exploit this flaw to perform unauthorized actions on the system.

Risk Assessment

Organizations may be exposed to attacks that could lead to data disclosure or system takeover. Exploitation of this vulnerability could result in serious security implications.

Recommendation

It is recommended to update Windows to the latest version to patch this vulnerability. Additionally, systems should be monitored for suspicious activity.

Original NVD description (English source)

Windows MSHTML Platform Security Feature Bypass Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS