CVE Vulnerabilities

CVE-2023-35378

Time-of-check Time-of-use (TOCTOU) Race Condition

Published: Aug 08, 2023 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Windows Projected File System Elevation of Privilege Vulnerability

Weakness

The product checks the state of a resource before using that resource, but the resource’s state can change between the check and the use in a way that invalidates the results of the check.

Affected Software

Name Vendor Start Version End Version
Windows_10_1809 Microsoft * 10.0.17763.4737 (excluding)
Windows_10_21h2 Microsoft * 10.0.19044.3324 (excluding)
Windows_10_22h2 Microsoft * 10.0.19045.3324 (excluding)
Windows_11_21h2 Microsoft * 10.0.22000.2295 (excluding)
Windows_11_22h2 Microsoft * 10.0.22621.2134 (excluding)
Windows_server_2019 Microsoft - (including) - (including)
Windows_server_2022 Microsoft - (including) - (including)

Potential Mitigations

References