CVE-2023-34159

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jun 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-34167.2The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL Injection via the 'subscriptionCouponId' parameter via the 'create_stripe_subscrCVE-2023-341605.3Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app CVE-2023-341617.5nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to CVE-2023-341627.5Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS CCVE-2023-341637.5Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to performCVE-2023-341647.5Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerabilitCVE-2023-341655.3Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may causeCVE-2023-341667.5Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the sCVE-2023-341675.3Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app CVE-2023-341688.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alex Raven WP Report Post allows SQL ICVE-2023-341698.8Cross-Site Request Forgery (CSRF) vulnerability in SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin <= 3.1.2 versions.CVE-2023-34177.5Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a do
CVE-2023-34159: Critical severity, CVSS 9.8 | Vulnix