CVE Vulnerabilities

CVE-2023-29366

Double Free

Published: Jun 14, 2023 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Windows Geolocation Service Remote Code Execution Vulnerability

Weakness

The product calls free() twice on the same memory address.

Affected Software

NameVendorStart VersionEnd Version
Windows_10_21h2Microsoft*10.0.19044.3087 (excluding)
Windows_10_22h2Microsoft*10.0.19045.3087 (excluding)
Windows_11_21h2Microsoft*10.0.22000.2057 (excluding)
Windows_11_22h2Microsoft*10.0.22621.1848 (excluding)
Windows_server_2022Microsoft- (including)- (including)

Potential Mitigations

References