Vulnerabilities > CVE-2023-21687 - Exposure of Resource to Wrong Sphere vulnerability in Microsoft products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

NVD

Published: 2023-02-14

Updated: 2023-02-23

Summary

HTTP.sys Information Disclosure Vulnerability

Vulnerable Configurations

Part	Description	Count
OS	Microsoft Microsoft Windows Server 2022 - Microsoft Windows 11 22H2 - Microsoft Windows 11 22H2 10.0.22621.521 Microsoft Windows 11 22H2 10.0.22621.525 Microsoft Windows 11 22H2 10.0.22621.608 Microsoft Windows 11 22H2 10.0.22621.674 Microsoft Windows 11 22H2 10.0.22621.675 Microsoft Windows 11 22H2 10.0.22621.755 Microsoft Windows 11 22H2 10.0.22621.819 Microsoft Windows 11 22H2 10.0.22621.900 Microsoft Windows 11 22H2 10.0.22621.1105 Microsoft Windows 11 21H2 - Microsoft Windows 11 21H2 10.0.22000.194 Microsoft Windows 11 21H2 10.0.22000.258 Microsoft Windows 11 21H2 10.0.22000.282 Microsoft Windows 11 21H2 10.0.22000.318 Microsoft Windows 11 21H2 10.0.22000.348 Microsoft Windows 11 21H2 10.0.22000.376 Microsoft Windows 11 21H2 10.0.22000.434 Microsoft Windows 11 21H2 10.0.22000.438 Microsoft Windows 11 21H2 10.0.22000.469 Microsoft Windows 11 21H2 10.0.22000.493 Microsoft Windows 11 21H2 10.0.22000.527 Microsoft Windows 11 21H2 10.0.22000.556 Microsoft Windows 11 21H2 10.0.22000.593 Microsoft Windows 11 21H2 10.0.22000.613 Microsoft Windows 11 21H2 10.0.22000.652 Microsoft Windows 11 21H2 10.0.22000.675 Microsoft Windows 11 21H2 10.0.22000.708 Microsoft Windows 11 21H2 10.0.22000.739 Microsoft Windows 11 21H2 10.0.22000.740 Microsoft Windows 11 21H2 10.0.22000.778 Microsoft Windows 11 21H2 10.0.22000.795 Microsoft Windows 11 21H2 10.0.22000.832 Microsoft Windows 11 21H2 10.0.22000.856 Microsoft Windows 11 21H2 10.0.22000.918 Microsoft Windows 11 21H2 10.0.22000.978 Microsoft Windows 11 21H2 10.0.22000.1042 Microsoft Windows 11 21H2 10.0.22000.1098 Microsoft Windows 11 21H2 10.0.22000.1100 Microsoft Windows 11 21H2 10.0.22000.1165 Microsoft Windows 11 21H2 10.0.22000.1219 Microsoft Windows 11 21H2 10.0.22000.1281 Microsoft Windows 11 21H2 10.0.22000.1455	87

Common Weakness Enumeration (CWE)

CWE-668 - Exposure of Resource to Wrong Sphere

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21687

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.