CVE-2023-35342
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
A vulnerability in Windows Image Acquisition allows for elevation of privilege, potentially leading to unauthorized access to the system.
Risk Assessment
An attacker could exploit this vulnerability to gain elevated privileges, posing a significant threat to the security of the system and organizational data.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability.
Other vulnerabilities in Windows Image Acquisition
See all- CVE-2026-85930High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-85842High
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83523High
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
- CVE-2026-69613High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-69500High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-69341High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-50315High
The Windows Image Acquisition component contains a null pointer dereference vulnerability that allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Windows Image Acquisition Elevation of Privilege Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS