CVE-2023-35308

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Windows MSHTML Platform Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Weakness enumeration

CWE-73

Affected software

No affected versions have been published.

Timeline

Published
Jul 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-353097.5Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2023-35315.4Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10.CVE-2023-353106.6Windows DNS Server Remote Code Execution VulnerabilityCVE-2023-353118.8Microsoft Outlook Security Feature Bypass VulnerabilityCVE-2023-353127.8Microsoft VOLSNAP.SYS Elevation of Privilege VulnerabilityCVE-2023-353137.8Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution VulnerabilityCVE-2023-353146.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-353158.8Windows Layer-2 Bridge Network Driver Remote Code Execution VulnerabilityCVE-2023-353166.5Remote Procedure Call Runtime Information Disclosure VulnerabilityCVE-2023-353177.8Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityCVE-2023-353186.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-353196.5Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-35308: Medium severity, CVSS 6.5 | Vulnix