CVE Catalog

CVE-2023-35341

MediumCVSS 6.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.50%

39th percentile - higher than 39% of all known CVEs

Summary

A vulnerability in Microsoft DirectMusic allows for information disclosure, potentially leading to unauthorized access to user data.

Risk Assessment

Organizations may be exposed to the leakage of sensitive information, which could result in privacy breaches and data security issues.

Recommendation

It is recommended to update Microsoft DirectMusic to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Microsoft DirectMusic Information Disclosure Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS