CVE-2023-35629

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1507>= 10.0.10240.0, < 10.0.10240.20345
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.22413
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)>= 6.0.6003.0, < 6.0.6003.22413
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.22413
MicrosoftWindows Server 2008 R2 Service Pack 1>= 6.1.7601.0, < 6.1.7601.26864
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)>= 6.1.7601.0, < 6.1.7601.26864
MicrosoftWindows Server 2012>= 6.2.9200.0, < 6.2.9200.24614
MicrosoftWindows Server 2012 (Server Core installation)>= 6.2.9200.0, < 6.2.9200.24614
MicrosoftWindows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.21715
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.21715

References

Timeline

Published
Dec 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-35636.1A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects some unknown processingCVE-2023-356308.8Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityCVE-2023-356317.8Win32k Elevation of Privilege VulnerabilityCVE-2023-356327.8Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2023-356337.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-356348.8Windows Bluetooth Driver Remote Code Execution VulnerabilityCVE-2023-356355.5Windows Kernel Denial of Service VulnerabilityCVE-2023-356366.5Microsoft Outlook Information Disclosure VulnerabilityCVE-2023-356387.5DHCP Server Service Denial of Service VulnerabilityCVE-2023-356398.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2023-35646.1A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown funCVE-2023-356418.8Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-35629: Medium severity, CVSS 6.8 | Vulnix