CVE-2023-35324: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-35324 is an information disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver, rated Important by Microsoft, with a CVSS 3.1 base score of 5.5 (Medium). An attacker can exploit it by an attacker with local access, with low privileges and without user interaction. Microsoft has not reported exploitation in the wild and rates exploitation as less likely. The EPSS model estimates a 0.52% probability of exploitation activity in the next 30 days, higher than 45% of all scored vulnerabilities. Microsoft released the fix on 11 July 2023 in the July 2023 Patch Tuesday, delivered through 11 security updates (KB5028168, KB5028171, KB5028182, KB5028166 and more). It affects 27 products in 2 product families (Windows, ESU).
Key facts
- CVE ID
- CVE-2023-35324
- Severity
- Medium CVSS 5.5
- Microsoft severity
- Important
- Impact
- Information Disclosure
- Exploited in the wild
- No
- Publicly disclosed
- No
- Exploitation likelihood
- Less Likely
- Weakness
- CWE-126
- EPSS
- 0.52% (percentile 45%)
- CISA KEV
- Not listed
- Released
- Last updated
- Patch Tuesday
- July 2023 Patch Tuesday
- Product families
- Windows, ESU
CVSS score and vector
Microsoft scores CVE-2023-35324 at 5.5 (temporal 4.8) using CVSS 3.1. Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
| Metric | Value |
|---|---|
| Attack vector | Local |
| Attack complexity | Low |
| Privileges required | Low |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality impact | High |
| Integrity impact | None |
| Availability impact | None |
| Exploit code maturity | Unproven |
| Remediation level | Official fix |
| Report confidence | Confirmed |
Frequently asked questions (Microsoft)
What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.
Affected products (27)
Windows
| Product | Security update | Type | Fixed build | Restart |
|---|---|---|---|---|
| Windows 10 Version 1809 for 32-bit Systems | KB5028168 | Security Update | 10.0.17763.4645 | Yes |
| Windows 10 Version 1809 for x64-based Systems | KB5028168 | Security Update | 10.0.17763.4645 | Yes |
| Windows 10 Version 1809 for ARM64-based Systems | KB5028168 | Security Update | 10.0.17763.4645 | Yes |
| Windows Server 2019 | KB5028168 | Security Update | 10.0.17763.4645 | Yes |
| Windows Server 2019 (Server Core installation) | KB5028168 | Security Update | 10.0.17763.4645 | Yes |
| Windows Server 2022 | KB5028171 | Security Update | 10.0.20348.1850 | Yes |
| Windows Server 2022 (Server Core installation) | KB5028171 | Security Update | 10.0.20348.1850 | Yes |
| Windows 11 version 21H2 for x64-based Systems | KB5028182 | Security Update | 10.0.22000.2176 | Yes |
| Windows 11 version 21H2 for ARM64-based Systems | KB5028182 | Security Update | 10.0.22000.2176 | Yes |
| Windows 10 Version 21H2 for 32-bit Systems | KB5028166 | Security Update | 10.0.19044.3208 | Yes |
| Windows 10 Version 21H2 for ARM64-based Systems | KB5028166 | Security Update | 10.0.19044.3208 | Yes |
| Windows 10 Version 21H2 for x64-based Systems | KB5028166 | Security Update | 10.0.19044.3208 | Yes |
| Windows 11 Version 22H2 for ARM64-based Systems | KB5028185 | Security Update | 10.0.22621.1992 | Yes |
| Windows 11 Version 22H2 for x64-based Systems | KB5028185 | Security Update | 10.0.22621.1992 | Yes |
| Windows 10 Version 22H2 for x64-based Systems | ||||
| Windows 10 Version 22H2 for ARM64-based Systems | ||||
| Windows 10 Version 22H2 for 32-bit Systems | ||||
| Windows 10 for 32-bit Systems | KB5028186 | Security Update | 10.0.10240.20048 | Yes |
| Windows 10 for x64-based Systems | KB5028186 | Security Update | 10.0.10240.20048 | Yes |
| Windows 10 Version 1607 for 32-bit Systems | KB5028169 | Security Update | 10.0.14393.6085 | Yes |
| Windows 10 Version 1607 for x64-based Systems | KB5028169 | Security Update | 10.0.14393.6085 | Yes |
| Windows Server 2016 | KB5028169 | Security Update | 10.0.14393.6085 | Yes |
| Windows Server 2016 (Server Core installation) | KB5028169 | Security Update | 10.0.14393.6085 | Yes |
ESU
| Product | Security update | Type | Fixed build | Restart |
|---|---|---|---|---|
| Windows Server 2012 | KB5028232 KB5028233 | Monthly Rollup Security Only | 6.2.9200.24374 6.2.9200.24374 | Yes Yes |
| Windows Server 2012 (Server Core installation) | KB5028232 KB5028233 | Monthly Rollup Security Only | 6.2.9200.24374 6.2.9200.24374 | Yes Yes |
| Windows Server 2012 R2 | KB5028228 KB5028223 | Monthly Rollup Security Only | 6.3.9600.21063 6.3.9600.21075 | Yes Yes |
| Windows Server 2012 R2 (Server Core installation) | KB5028228 KB5028223 | Monthly Rollup Security Only | 6.3.9600.21063 6.3.9600.21075 | Yes Yes |
Security updates (11)
NIST NVD data
- NVD status
- Modified
- NVD CVSS
- 5.5 (MEDIUM)
- NVD weakness
- CWE-126
- Published to NVD
- NVD last modified
Affected configurations (CPE)
| Product | Vulnerable versions |
|---|---|
| windows 10 1507 | before 10.0.10240.20048 |
| windows 10 1607 | before 10.0.14393.6085 |
| windows 10 1809 | before 10.0.17763.4645 |
| windows 10 21h2 | before 10.0.19041.3208 |
| windows 10 22h2 | before 10.0.19045.3208 |
| windows 11 21h2 | before 10.0.22000.2176 |
| windows 11 22h2 | before 10.0.22621.1992 |
| windows server 2012 | all listed versions |
| windows server 2012 r2 | all listed versions |
| windows server 2016 | all listed versions |
| windows server 2019 | all listed versions |
| windows server 2022 | all listed versions |
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35324 (Patch, Vendor Advisory)
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35324 (Patch, Vendor Advisory)
Acknowledgments
- kap0k
Revision history
| Version | Date | Description |
|---|---|---|
| 1.0 | Information published. |