CVE-2023-21687

MediumCVSS 5.5/10Last modified Aug 19, 2026

Description

HTTP.sys Information Disclosure Vulnerability

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125CWE-668

Affected software

No affected versions have been published.

Timeline

Published
Feb 14, 2023
Last modified
Aug 19, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-216887.8NT OS Kernel Elevation of Privilege VulnerabilityCVE-2023-216899.8Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityCVE-2023-21694.8The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and iCVE-2023-216909.8Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityCVE-2023-216917.5Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure VulnerabilityCVE-2023-216929.8Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityCVE-2023-216935.7Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-216946.8Windows Fax Service Remote Code Execution VulnerabilityCVE-2023-216958.8Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityCVE-2023-216975.5Windows Internet Storage Name Service (iSNS) Server Information Disclosure VulnerabilityCVE-2023-216995.3Windows Internet Storage Name Service (iSNS) Server Information Disclosure VulnerabilityCVE-2023-21704.8The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and i
CVE-2023-21687: Medium severity, CVSS 5.5 | Vulnix