CVE-2023-29357

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-303

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2023
Last modified
Jun 17, 2026
Added to CISA KEV
Jan 10, 2024
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-293587.8Windows GDI Elevation of Privilege VulnerabilityCVE-2023-293597.8GDI Elevation of Privilege VulnerabilityCVE-2023-29368.8Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted CVE-2023-293608.4Microsoft Streaming Service Elevation of Privilege VulnerabilityCVE-2023-293617.0Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2023-293628.8Remote Desktop Client Remote Code Execution VulnerabilityCVE-2023-293639.8Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityCVE-2023-293647.0Windows Authentication Elevation of Privilege VulnerabilityCVE-2023-293657.8Windows Media Remote Code Execution VulnerabilityCVE-2023-293667.8Windows Geolocation Service Remote Code Execution VulnerabilityCVE-2023-293677.8iSCSI Target WMI Provider Remote Code Execution VulnerabilityCVE-2023-293687.0Windows Filtering Platform Elevation of Privilege Vulnerability
CVE-2023-29357: Critical severity, CVSS 9.8 | Vulnix