PT-2023-1129

CVE-2023-21536

Publicado

2023-01-10

Atualizado

2024-05-29

Descrição por

CVSS 3.1

4.7

Média

MétricasAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Event Tracing for Windows (affected versions not specified)

Description The issue is related to synchronization errors when using a shared resource in the Event Tracing service for Microsoft Windows operating systems. This can allow an attacker to disclose protected information. The vulnerability enables attackers to obtain sensitive information and affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impactos

Pesquisadores

Danny Odler

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')

CWE-125: Out-of-bounds Read

CWE-668: Exposure of Resource to Wrong Sphere

Identificadores relacionados

CVE-2023-21536